HEMLIG 


2024-04-10 


GÓTEBORGS TINGSRÁTT 


B 2041-23 
Aktbilaga 251 


FU-sekretess maa tredje gárningsman pá fri fot 


Polisen 


Handlággande enhet 
Region Vast, Grova brotts- 
grupp 2 Rgn Vast 


Beslagsprotokoll 


Signerat av 


Signerat datum 


2021-5000-BG24055 


Diarienummer 


5000-K189802-21 


Misstánkt person 


Ali, Mahad Abdullahi, 19961025-0731 


Plats fór verkstállan 


Beslagenheten , Odinsgatan , Göteborg 


Datum och klockslag fór verkstállighet 


2021-02-25 09:56 


Beslutat av 
Wennergren, Anna 
Wennergren, Anna 


Verkstállt av 
Nyholm, Susann 


Andamal med átgárden 


* Kan antagas ha betydelse för utredningen av 


brott 


Brott 


0337 - Försök till mord 


Domstol för överklagan 


Beslag taget från 


Solna tingsrått Ali, Mahad Abdullahi 
Föremålspunkter 
Platsbeskrivning Status 
2021-5000-BG24055-1 MT bar telefonen i jackan. Faststálld 
Mobiltelefon ( 1 st) OBS! Ursprungligen beslagtagen 1 
árende K170392-21. BG18149-1 
Ansprákstagare 
Ali, Mahad Abdul- 
lahi 
Fabrikat : Apple IMEI-nr 1: 359464084447684 
Fårg : Svart 
Platsbeskrivning Status 
2021-5000-BG24055-2 Mt hade telefonen i jackfickan. Faststålld 
Mobiltelefon ( I st) OBS! Ursprungligen beslagtagen 1 
árende K170392-21. BG18149-2 
Ansprákstagare 
Ali, Mahad Abdul- 
lahi 
Fabrikat : Apple IMEbnr1: 352619273971003 
Platsbeskrivning Status 
2021-5000-BG24055-3 Mt hade telefonen i jackfickan. Faststálld 
Mobiltelefon ( 1 st) OBS! Ursprungligen beslagtagen 1 
árende K170392-21. BG18149-3 
Ansprákstagare 
Ali, Mahad Abdul- 
lahi 


Fabrikat: Samsung 


Vit 


Färg : 
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Polisen 


Telefongenomgang 


2021-5000-BG24055-2 Apple Iphone D53gAP (Iphone 12) 
5000-K189802-21 


Polisen Region Vast 


2023-09-13 
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Innehållsförteckning 


3.2.7 


1: SYFTE/UPPDRAQ...;.:.:: oo etta NANG PAG NAIA BAYAAN GIA GS 3 
RR GALANG NAUNA KA DIN RAANG AA 3 
3: ue 3 
3:1, Information om enheten innne dais BER Dictada 3 
3.2: “TELEFON Gata iaa dida da ista 5 
3.2.1 
3.2.2 A NAN SNO 
3.2.3 Contacts 
3.2.4 Installed Applications (installerade appar).... 
3.2.5 User Accounts 
3.2.6 
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1 Syfte/Uppdrag 


Genomgång av beslag 2021-5000-BG24055-2, en telefon med tillhörande SIM-kort beslagtagen från Mahad 
Ali 2021-02-11 kl 18.40 i samband med att Mahad Ali greps misstänkt för förberedelse till grovt rån 
(K170392-21) på Artillerigatan i Göteborg. Telefonen bars då i fickan på en jacka som Mahad hade på sig. 
Han satt i baksätet på en bil som stoppades av en polispatrull. Beslaget hade ursprungligen beslagsnummer 
2021-5000-BG18149-2. Beslaget hävdes sedemera och togs 2021-02-25 i beslag i ärende K189802-21 och 
fick i samband med detta sitt nya beslagnummer, 2021-5000-BG24055-2. 


Syfte med undersökningen är att utröna om det finns information av intresse för utredningen i den data 


som extraherats från telefonen. 
2 Metod 


Genomgången av telefonen följer de rubriker/mappar som är satta av telefontömningsprogramet UFED. 
Det finns flertalet rubriker/mappar som har ett irrelevant innehåll för utredningen, dessa rubriker kommer 
att granskas men inte presenteras i genomgången. 


Fokus för undersökningen är tidsperioden från november 2020 till 2021-02-11 då telefonen togs i beslag. 


3 Premisser 


3.1 Information om enheten 


Den beslagtagna telefonen är av märket Apple iPhone D53gAP (Iphone 12). 
Då telefonen töms på sitt innehåll är telefonnummer +46767112450 aktivt i telefonen. 
Inställt Apple ID är fares.ameri@hotmail.com. 


Nedan följer ett utdrag på information om enheten från undersökningsprokollet. 
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Henrik Norlin, Utredare Grova Brott 


Uppráttad av 


Dokument 
Telefongenomgáng 


Datum 


2023-09-13 


Diarienr 


Saknr 


5000-K189802-21 


Version 


01.00 


Device Information 


Phone Settings 
Message Retention Duration 
Location Services Enabled 
iPhone enabled 


Find 
Tethering 
Last Hotspot Activi 
Model number 
Last used MSISDN 
Last user ICCID 
Serial 
Unique ID 
IMEI2 
IMEI 
AirDrop ID 
Time Zone 
pple ID 
iCloud account present 
Device Name 
Bluetooth device address 
ICCID 
MSISDN 
OS Version 
c Data 


VoiceMemo Size (bytes) 


2021-02-15 09:31:00(UTC+0 
D53gAP 


+46767112450 
89462048009093167238 
FFYDVQ4FOFOV 
00008101-0002192A1144001E 
352619273982109 
352619273971003 
Af707c1ff59d 

UTC#01:00) Stockholm (Europe 
fares.ameri@hotmail.com 


True 

iPhone 
<string>0C:19:F8:84:C2:A5</string> 
89462048009093167238 
46767112450 


VoiceMemo Entries 
UserData Size (bytes 
UserData Entries 

Storage available (Bytes) 
Book Size (bytes 

Book Entries 

Application Size (bytes) 


46324723712 
0 

0 
4812550144 


Application Entries 


16 


Logs Size (bytes 
Logs Entries 
Ringtone Size (bytes) 
Ringtone Entries 
Proofing Size (bytes 
Proofing Entries 


Storage capacity (Bytes) 
Network Interfaces 

Wi-Fi MAC address 

MAC address 

MAC address 


User Accounts (11) 


8577024 
127 


0 
0 
0 


0 
56925884416 


0C:19:F8:8B:10:4D 
0E:19:F8:8D:1E:EC 
0E:19:F8:8D:1E:13 


fares.ameri@hotmail.com |3589280D-9C42-417D- 
A65F-DCOSAE24F4A7 


fares.ameri@hotmail.com EF296EFC-9580-4 152- 
69B-3C8309030599 
fares.ameri hotmail.com |4930F 164-34E3-4D8D- 
A092-A7948ADB8E9A 
i B98A. 


C707C967-1AB8-461A- 
97CC-24B3960B9EC9 


fares.ameri@hotmail.com |4A1617DD-5587-4640- 
8A0C-F8657D653993 


2021-01-26 
18:42:36(UTC+1) 


2021-01-17 
02:28:02(UTC+1) 


fares.ameri@hotmail.com aan E-40B7- |2021-01-17 
ADC6-A22F77FD49FC | 02:28:01(UTC+1) 

fares.ameri@hotmail.com |679555A7-C4B3-4A4F- | 2021-01-26 
B9C3-46EA35C49359  |18:41:47(UTC+1) 


2021-01-26 
18:42:36(UTC+1) 


2021-01-26 
18:41:47(UTC+1) 
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Modell Apple IPhone 12 


IMEI 1: 352619273971003 
2: 352619273982109 


ICCID 89462048009093167238 


Foljande innehall ar extraherat fran enheten: 


Content 


B Log Entries 


Rubriker och relevant innehall for utredningen redovisas nedan. 


3.2 Telefondata 
3.2.1 Aggregated Application Usage 


Under denna rubrik finns det 2 poster: com.apple music samt com.apple.CryptoTokenKit.setoken. 
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Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 
3.2.2 Chats 


Under denna rubrik finns det 87 poster. Av dessa år 83 poster chattrådar i applikationen Snapchat. 


Konversation med okånd. Gröna pratbubblor skrivs av brukaren av snapchatkontot, blå av motparten. 
Motparten skriver mejladressen ”Jo email com". Jonas Tadesse år en person som av polisen i 
Göteborg bedöms tillhöra kriminellt nåtverk ”Tadesse/Vermahmood”, i media benåmnt som M-falangen. 


Participants (2) 


a Unknown (owner) 
ca10df2d-08df-4a1c-b8fe-96£409£9b03d 
Unknown 


be e7438411-632a-45d2-8b10-e9d2cad79107 


“Conversation 


— y Select/Deselect all 17 messages 


[OR e7438411-632a-45d2-8b10-e9d2cad79107 


2021-01-08 22:47:35(UTC+1) 
e7438411-632a-45d2-8b10-e9d2cad79107 
ise@gmail.com 
2021-01-11 23:06:19(UTC+1) 
e7438411-632a-45d2-8b10-e9d2cad79107 
Tadesse42134 
2021-01-11 23:06:25(UTC- 1) 
Sources (1 
e7438411-632a-45d2-8b10-e9d2cad79107 
Gótagatan 67 
3 2021-01-18 12:48:54(UTC+1) 
Sources (1 
e7438411-632a-45d2-8b10-e9d2cad79107 
https://gofile.io/d/IRbDV1 
B 2021-01-18 14:34:16(UTC+1) 
Sources (1) 
cat0df2d-08df-4a1c-b8fe-96f409f9b03d a * 
B 2021-01-18 14:38:58(UTC+1) 
Sources (1 
€7438411-632a-45d2-8b10-e9d2cad79107 


2021-01-18 15:53:10(UTC+1) 


Sources (1) 


e7438411-632a-45d2-8b10-e9d2cad79107 


& 2021-01-18 15:53:13(UTC+1) 


Sources (1) 


e7438411-632a-45d2-8b10-e9d2cad79107 


BS 2021-01-18 15:53:19(UTC+1) 


Sources (1 


e7438411-632a-45d2-8b10-e9d2cad79107 


KSI 


c» 


2021-02-04 04:18:43(UTC+1) 


e7438411-632a-45d2-8b10-e9d2cad79107 


2 år sedan idag 


LAS 2021-02-04 04:18:43(UTC+1) 


Sources (1) 


Telefongenomgang 2021-5000-BG24055-2 , 2023-09-13 16:13 diarienr: 5000-K189802-21 82 


$ Polisen Dees »[ HEMLIG 


Uppráttad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


cat10df2d-08df-4a1c-b8fe-96f409f9b03d 


B 2021-02-09 11:53:18(UTC+1) 
Sources (1 
ca10df2d-08df-4a1c-b8fe-96f409f9b03d 


Aha oki bror 


2021-02-09 12:15:20(UTC+1) 


rces (1 


Konversation med 10 andra okánda i snapchatgrupp. Gróna pratbubblor skrivs av brukaren av 
snapchatkontot, blå av motparter. Chattråden består av ett stort antal meddelanden som inte år av vikt för 
detta årende. 2021-02-11 kl 11:38:19 skriver en okånd ett meddelande som riktar sig till Mahad. 


Participants (11) 
Unknown 

SS 1e2952de-e8e3-4281-a20f-6e95e47f4af4 

i Unknown 

e ff7c16d5-6aba-44b4-81ad-3a3f8a8fc4bb 
Unknown 

© U 76824092-37e2-4530-9fe5-3ee&bfBeae30 
Unknown 

© © 7ba29522-ab9e-444b-ba29-2fe80671781e 
Unknown 

pa dbdb2889-97af-41e7-8625-6b09021ef9d9 
Unknown 

SS 333b6188-0e9d-438f-955c-e6951c1eb7a1 
Unknown 

pa 271ec016-1f9b-4291-8e8d-5b42e330aa05 
Unknown 

© © 245Bcle-Ib4b-dedf-9409-65269fbb4bb1 
Unknown (owner) 

9 9 Cal0df2d-08df-4a1c-b8fe-96f409f9b03d 
Unknown 

ev 0da6b7d7-43c3-47c6-a0f4-0efeb6ef7cdc 
Unknown 

vy e 


50bc1d97-da05-40bf-ab60-cf7ef4eb7055 


Conversation 
— v Select/Deselect all 364 messages 


ff7c16d5-6aba-44b4-81ad-3a3f8a8fc4bb 


Ey mahad kan du lågga en zingi på nån av kukarna 


2021-02-11 11:38:19(UTC+1) 


Telefongenomgáng 2021-5000-BG24055-2 , 2023-09-13 16:13 diarienr: 5000-K189802-21 83 


$ Polisen e T »[ HEMLIG 


Upprättad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


Ett meddelande skickas till telefonen i tjänsten ”Imo” (App message) som är en tjänst för 
snabbmeddelanden. Kan laddas ned och brukas som en app i telefonen. Meddelandet skickas 2021-01-31 
och börjar med ”Hi, Mahad...”. 


Participants (1) 


Unknown 
= = 1022230000000000 


Conversation 


— Y Select/Deselect all 1 messages 


Sources (1 


Ett meddelande skickas till telefonen i tjånsten ”Imo” 2021-01-31 kl 19:10:24 med innehállet ”Maryan iso 
dir nr”. Avsändare år "Mamma 9”. I telefonens kontaktbok har denna kontakt username Hawa 
Mohammed vilket överensståmmer med Mahad Alis mammas namn. Telefonnumret kopplat till Hawa 
Mohammed i kontaktboken óverensstámmer med det telefonnummer Mahads mamma har angett i 
samband med passansökan. Se åven under rubriken Contacts. 


Participants (1) 


Mamma Y 
= Y 1002315238971943 


Conversation 


— Y Select/Deselect all 1 messages 


Sources (1 
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Konversation med okänd i Snapchat 2021-02-02 där användaren av kontot skriver två 
meddelanden som handlar om Philip Carvalo: 


Participants (2) 


Inknown 
©  p0seetf-7de3-4e53-bcf1-8598315757c1 


Unknown (owner) 
9 9 (ai0df2d-OBdf-4a1c-b8fe-96f409f9b03d 
Conversation 
— v Select/Deselect all 2 messages 


ca10df2d-08df-4a1c-b8fe-96f409f9b03d 


Philip carvahlo 


rea), 
ER 


eS 2021-02-02 17:01:05(UTC+1) 


cal0df2d-08df-4aic-b8fe-96f409f9b03d 


Haktet Goteborg bror 


e 


2021-02-02 17:01:57(UTC+1) 


Sources (1 


Konversation med okånd i Snapchat 2021-02-04 till 2021-02-07 dar anvándaren av kontot skickar 
telefonnummer 0767112450 i ett meddelande. Detta nummer år det som sitter i den extraherade 
telefonen. 


Participants (2) 


Unknown (owner) 
© ©  cat0df2d-OBdf-41c-bSfe-96f409f9b03d 


Unknown 
© © 5e8a84e0-d4e2-4b46-b43b-34ce8fbededb 


Conversation 
— Y Select/Deselect all 7 messages 


5e8a84e0-d4e2-4b46-b43b-34ce8fbcdedb 


2021-02-04 20:39:11(UTC 1) 


Sources (1) 


cat10df2d-08df-4a1c-b8fe-96f409f9b03d 


2021-02-04 22:51:09(UTC+1) 
Sources (1) 
cat0df2d-08df-4a1c-b8fe-96f409f9b03d A 
eS 2021-02-04 22:51:16(UTC *1) 
Sources (1) 
cat0df2d-08df-4a1c-b8fe-96f409f9b03d e 
B 2021-02-04 22:54:39(UTC +1) 
a cat0df2d-08df-4a1c-b8fe-96f409f9b03d 
Y 


0767112450 


eS 2021-02-07 21:09:48(UTC+1) 


Sources (1 
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Konversation mellan anvåndaren av snapchatkontot och en okånd anvåndare innehåller 182 meddelanden. 
Det förefaller på tonen i meddelandena som att de har någon sorts kårleksrelation. I konversationen 
diskuteras en mailadress som skapats. Motparten skriver att hen gjort en ny mailadress, 
mahadmose96@outlook.com. Utdrag ur konversationen visas nedan. 


Participants (2) 


CH Unknown (owner) 
ca10df2d-08df-4a1c-b8fe-961409f9b03d 

a Unknown 
aed38a7a-f7b8-4cb1-bc59-fef2612ea334 


Conversation E 


— Y Select/Deselect all 182 messages 


aed38a7a-f7b8-4cb1-bc59-fef2612ea334 


Mirette.milaja 


to), 


2021-01-20 23:26:50(UTC+1) 


Sources (1 


aed38a7a-f7b8-4cb1-bc59-fef2612ea334 


Tror lósen ar dinmamma123 
2021-01-20 23:2705(UTC+1) 
aed38a7a-f7b8-4cb1-bc59-fef2612ea334 
Mirettemilaja 
a 2021-01-20 23:27:16(UTC+1) 
Sources (1 
aed38a7a-f7b8-4cb1-bc59-fef2612ea334 
Lósen ar kebab14233 
2021-01-20 23:27:30(UTC+1) 
cat0df2d-08df-4a1c-b8fe-96f409f9b03d A 
3 2021-01-21 03:08:39(UTC+1) 
Sources (1 
cat0df2d-08df-4a1c-b8fe-96f409f9b03d eG ` 
B 2021-01-29 00:46:50(UTC+1) 
Sources (1) 
cat0df2d-08df-4a1c-b8fe-96f409f9b03d e 
B 2021-02-01 12:56:54(UTC+1) 
Sources (1 
aed38a7a-f7b8-4cb1-bc59-fef2612ea334 
e 2021-02-01 15:37:50(UTC+1) 
Sources ( ) 
aed38a7a-f7b8-4cb1-bc59-fef2612ea334 
Va tvungen göra ny Mail o den år mahadmose96@outlook.com 
B 2021-02-03 20:26:04(UTC+1) 
Sources (1 
cat0df2d-08df-4a1c-b8fe-96f409f9b03d 


on 


eS 2021-02-04 19:15:42 (UTC+1) 


Sources (1 
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Konversation mellan anvåndaren av snapchatkontot i telefonen och okånd motpart mellan 2021-01-31 och 
2021-02-01. Endast 3 utgående meddelanden men dessa förefaller innehålla bl.a. lånkar till sökningar på 
Airbnb-boenden i Stockholm under tiden 2021-02-18 till 2021-02-21. 


Participants (2) 


a Unknown (owner) 
ca10df2d-08df-4a1c-b8fe-96f409f9b03d 


a Unknown 
025b653b-7d16-444f-bcae-69a3025733cd 


Conversation 


cat0df2d-08df-4a1c-b8fe-96f409f9b03d 


https://www.airbnb.se/rooms/45111366? 
adults=5&check in=2021-02-18&check out-2021-02-21&source impression id-p3 1612098150 irAYTeTL6ftZEAKt 


&guests-1 


em 2021-01-31 14:04:22(UTC *1) 


ca10df2d-08df-4a1c-b8fe-96f409f9b03d 


https://www.airbnb.se/rooms/45095774/photos? 
adults=5&check in=2021-02-18&check out-2021-02-21&source impression id-p3 1612098320 ldns2yVy8Bpv9c5v 


2021-01-31 14:06:22(UTC+1) 


cat0df2d-08df-4a1c-b8fe-96f409f9b03d 
quality hotel friends arena 


2021-02-01 21:40:13(UTC+1) 


ws 


Besóker man lanken som skickas 2021-01-31 kl 14:04:22 visas foljande lagenhet vid St:Eriksplan, 


Norrmalm, Stockholm: 
€ 5 CA @ airbnb.se/rooms/45111366?adults- 5&check in=2021-02-188&check out-2021-02-218isource impression id=p3 1612098150 irAYTeTL6ftZEAKt&guest.. & A Y 


A airbnb Påbörja din sökning Q Hyr ut ditt boende på Airbnb @ = o 


å Utforska Sthlm. från denna mysiga Top Beläget Lgh. 
K 4,52- 87 omdömen - Norrmalm, Stockholms lån, Sverige 
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Hela boendet (lágenhet) med várden Fredrik 
7 gäster - 2 sovrum 3 sängar - 1 badrum 1512 kr SEK natt — * 4,52- 87 omdömen 
INCHECKNING UTCHECKNING 
-02-1 1-02- 
A sjálvstándig incheckning 2021:02:19 20210221 
Checka in dig själv via ett låst nyckelskap. GÄSTER 
5 gäster Ka 
O Something went wrong. Try your dates again 
Ba En del information har översatts automatiskt. Visa originalspråk 
Vålkommen till Sthim! 
Med bara några minuters promenad till S: t Eriksplan ligger denna ljusa, eleganta och 
eleganta lågenhet. Lågenheten år smakfullt inredd och med ett utrustat kök kan du njuta Detta år ett sållsynt fynd. Boendet VG 
av hemlagade måltider eller gå till en av de många hårliga restaurangerna runt. som Fredrik år vård för på Airbnb år 
vanligtvis fullbokat. 
Visa mer > 
Mt Rapportera den hår annonsen 
Besöker man lånken som skickas 2021-01-31 kl 14:06:22 visas en sida på airbnb med hus/stugor i 
Stockholmsområdet: 
& Semesterboenden och hyresläge X + E x 
€ > C 0 à airbnb.se ex 08 
Q airbnb Vart som helst Vilken vecka som helst Lágg till gáster Q Hyr ut ditt boende på Airbnb ` p = O 
e ka Qt x ta X ES e a dium laus 
Stugor Fantastisk utsikt Vid sjón Vaderkvarnar Nationalparker Nara pisten Stora egendomar Luxe Wow! Ba 


Tyresó Strand, Sverige 
Privat várd 
8-13 okt. 


723 kr SEK natt 


* 4,76 


Ekerö, Sverige 
Privat várd 
30 sep.- 5 okt. 


902 kr SEK natt 


* 4,93 Knivsta C, Sverige * 4,85 Vaxholm, Sverige 
Privat vård Privat vård 
20-25 sep. 16-21 sep. 
530 kr SEK natt 13 083 kr SEK natt 


Visa karta 


. CR 


* 5,0 
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3.2.3 Contacts 


Under rubriken kontakter finns 6 poster. Samtliga håmtade ur kommunikationsappen ”Imo”. 
Kontakten "Mamma WS " har i telefonens kontaktbok användarnamnet Hawa Mohammed 
vilket överensstämmer med Mahad Alis mammas namn. Telefonnumret kopplat till Hawa 
Mohammed i kontaktboken överensstämmer med det telefonnummer Mahads mamma har 
angett i samband med passansökan. 


BO Doo — Y |t GI XIA Interaction Statuses” Phones v Other Entries v T Name v Source v 
SKI | 
H 2 «252615459555 Username Maryan M Imo 
H 3 0708922241 Username Hawa Mohammed Mamma Y Imo 
H 4 «252615192542 Username Maryan Cabdi Marian Imo 
I 5 Z d Username Saida Saida Imo 
L| 6 H BA Username . Sams Syster Imo 
3.2.4 Installed Applications (installerade appar) 
Under denna rubrik finns 657 poster. 
Bland dessa kan námnas: 
Imo, Wickr Me, WhatsApp, SnapChat 
Installed Applications (4) 
# Name Description [ees [ees [eem [ee Je E: Iess c 
cal 
1 imo Version: Purchase Date Launches Categories E: 
videosamtal 2021.2.1 2021-01-31 Activations SocialNetwork 
och chatt Operation 18:12:34(UTC+1) Last Launch ing 
Application ID: | Mode: Install Date Active Time ChatApplicatio 
CE115431- Foreground Last Modified 00:00:00 ns 
55F0-4A7F- cation Deleted Date Background Time 
A700- Size (bytes): 0 00:00:00 
CDF76313D40 | Decoded: Yes 
5 Artifact Family: 
imoimiphone Source 
Source: Beposkory 
Path: 
2 Wickr Me - Version: 5.70.7 | Purchase Date Launches Categories e 
Private Operation 2019-07-29 Activations SocialNetwork 
Messenger Mode: 10:22:21(UTC+2) Last Launch ing 
Application ID: | Foreground Install Date Active Time ChatApplicatio 
8967301D- Application Last Modified 00:00:00 ns 
79BE-4FE8- | Size (bytes): 0 | Deleted Date Background Time 
AA2C- Artifact Family: 00:00:00 
7E9355385E2 | Source 
6 Reposioiy 
com.mywickr.w | Path: 
ickr 
Source: 
3 WhatsApp Version: Purchase Date Launches Categories D 
Messenger 221.11 2019-07-01 Activations SocialNetwork 
Application ID: | Operation 16:37:39(UTC+2) Last Launch ing 
ABEF7296- Mode: Install Date Active Time ChatApplicatio 
2D14-49C3- Foreground Last Modified 00:00:00 ns 
9C4F- Application Deleted Date Background Time 
01C1F770A85 | Size (bytes): 0 00:00:00 
0 Decoded: Yes 
netwhatsapp. | Artifact Family: 
WhatsApp Source 
Source: sont 
Path: 
4 Snapchat Version: Purchase Date Launches Categories e 
Application ID: | 11.11.0 2019-07-01 Activations Lifestyle 
C7B1980E- Operation 16:13:09(UTC#2) Last Launch ChatApplicatio 
782D-4ABE- Mode: Install Date Active Time ns 
97BC- Foreground 00:00:00 
5BC35109F32 | Application — hast Modified Background Time 
0 Size (bytes): 0 00:00:00 
com.toyopagro | Decoded: Yes 
up.picaboo Artifact Family: 
Source: Source 
Repository 
Path: 
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@ Polisen 


Uppráttad av 


Henrik Norlin, Utredare Grova Brott 


Dokument 


Telefongenomgáng 


Datum 


2023-09-13 


Diarienr 


Saknr 


5000-K189802-21 


Version 


01.00 


3.2.5 


Under denna rubrik finns 11 poster. 


User Accounts 


User Accounts (11) 


O ES E E Er 


Accounts fares.ameri@hotmail.com |3589280D-9C42-417D- | 2021-01-26 
A65F-DCOSAE24F4A7 18:42:36(UTC+1) 

2 [Accounts fares.ameri@hotmail.com | EF296EFC-9580-4152- | 2021-01-17 
A69B-3C8309030599 02:28:02(UTC+1) 

3 |Accounts fares.ameri@hotmail.com |F33C8D6E-521E-40B7- | 2021-01-17 
ADC6-A22F77FD49FC 02:28:01(UTC+1) 

4 [Accounts fares.ameri@hotmail.com |679555A7-C4B3-4A4F- | 2021-01-26 
B9C3-46EA35C49359 18:41:47(UTC+1) 

5 |Accounts fares.ameri@hotmail.com |4930F164-34E3-4D8D- | 2021-01-26 
A092-A7948ADB8E9A 18:42:36(UTC+1) 

6 [Accounts fares.ameri@hotmail.com |5B5F18F8-FA5E-4D51- |2021-01-17 
B98A-C36CD9608A4 1 02:27:49(UTC+1) 

7 Accounts fares.ameri@hotmail.com |B92BDECB-3A23-4BA2- | 2021-01-17 
ADFB-8BAD9080DECA | 02:31:21(UTC+1) 

8 ¡Accounts local C707C967-1AB8-461A- | 2021-01-17 
97CC-24B3960B9EC9 02:32:15(UTC+1) 

9 [Accounts fares.ameri@hotmail.com | AAESBF9F-BC3A-4439- | 2021-01-23 
B5AC-B83C5667396D 03:58:27(UTC+1) 

10 [Accounts local BCB524D8-CE9F-4BE5- | 2021-01-23 
A176-96DFF22F2423 04:04:51(UTC+1) 

11 [Accounts fares.ameri@hotmail.com |4A1617DD-5587-4640- |2021-01-26 
8A0C-F8657D653993 18:41:47(UTC+1) 

3.2.6 Images 


Under denna rubrik finns 13433 poster. 


Inga poster / bilder av betydelse för utredningen. 


3.2.7 


Videos 


Under denna rubrik finns 740 poster. De nedan redovisade posterna går inte att såga hur videorna har 


lagrats i telefonen, dvs om de skapats i telefonen eller skickats till telefonen. 
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2021-02-08 kl 03:30:04 har ett 9 sek langt filmklipp lagrats i telefonen dar en hand som forefaller tillhóra 


filmaren hanterar en stor mangd 500-kronorssedlar. 


Videos 


Details 


ro 
© 
7 
Save 


Name: 


Type: 
Size (bytes): 
Path: 


Created: 
Accessed: 
Modified: 
Changed: 
Deleted: 
Extraction: 
MDS: 


Source file: 


Goto - 


cm-chat-media-video-Gkpi7z5wg0nvDAKDOUMw3.mov | 2021-02-08 03:30:04 «01:00 Dr 


cm-chat-media-video- 
Gkpi7zSwgOnvDAKDOUMw3.mov 

Videos 

1707046 
00008101-0002192A1144001E_files_partial- 
bfu.zip/private/var/mobile/Containers/Data/ 
Application/ 
C7B1980E-7B2D-4ABE-97BC-5BC35109F320/ 
Library/Persistent/SCMedia/cm-chat-media- 
video-Gkpi725wg0nvDAKDOUMw3.mov 
2021-02-08 03:30:04(UTC- 1) 

2021-02-08 03:30:04(UTC- 1) 

2021-02-08 03:30:04(UTC+1) 


Legacy 
5572dd5497c2cecf2bdfddd451d55883 


cm-chat-media-video- 


Gkpi725wg0nvDAKDOUMw3.mov 
> ox 0005/00099 — di 


2021-08-07 kl 20:37:13 har ett 8 sek langt filmklipp lagrats i telefonen dar en hand som forefaller tillhóra 


filmaren hanterar en stor mangd 500-kronorssedlar. 


Videos 


Details 


Save 


Name: 


Type: 
Size (bytes): 
Path: 


Created: 
Accessed: 
Modified: 
Changed: 
Deleted: 
Extraction: 
MD5: 


Source file: 


Goto + 


cm-chat-media-video-kHdt2xpw3SzsD4rirgbdl.mov | 2021-02-07 20:37:13 «01:00 % 


cm-chat-media-video- 
kHdt2xpw3SzsD4rlrgbdl.mov 

Videos 

1347824 
00008101-0002192A1144001E files partial- 
bfu.zip/private/var/mobile/Containers/Data/ 
Application/ 
C7B1980E-7B2D-4ABE-97BC-5BC35109F320/ 
Library/Persistent/SCMedia/cm-chat-media- 
video-kHdt2xpw3SzsD4rlrgbdl.mov 
2021-02-07 20:37:13(UTC- 1) 

2021-02-07 20:37:13(UTC+1) 

2021-02-07 20:37:13(UTC« 1) 


Legacy 
a0993201edb0d395062bb726fbadb3c2 
cm-chat-media-video- 
kHdt2xpw3SzsD4rlrgbdl.mov > m x 00:06/00:08 4| — 
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2021-02-07 kl 15:40:42 har ett 9 sek långt filmklipp lagrats i telefonen som förefaller vara en selfiefilm på 
Shaban Muse, vilket år Mahad Alis bror. 


Videos Goto ~ 


Details 


cm-chat-media-video-W3K8PJa8NMnWotavN3XGY.mov | 2021-02-07 15:40:42 +01:00 +” 


©) 


Save 

Name: cm-chat-media-video- 
W3K8PJa8NMnWotavN3XGY.mov 

Type: Videos 

Size (bytes): 1710229 

Path: 00008101-0002192A1144001E files partial- 
bfu.zip/private/var/mobile/Containers/Data/ 
Application/ 
C7B1980E-782D-4ABE-97BC-58C35109F320/ 
Library/Persistent/SCMedia/cm-chat-media- 
video-W3K8PJa8NMnWotavN3XGY.mov 

Created: 2021-02-07 15:40:42(UTC+1) 

Accessed: 2021-02-07 15:40:42(UTC+1) 

Modified: 2021-02-07 15:40:42(UTC+1) 

Changed: 

Deleted: 

Extraction: Legacy 

MD5: 76b4de0721191cba5cfa458711deb62a 

Source file: cm-chat-media-video- 


W3K8PJa8NMnWotavN3XGY.mov > x 0005/0009 = 


2021-02-09 kl 17:55:52 har ett 9 sek lángt filmklipp lagrats i telefonen som ár en film pa Mahad Ali som 
sitter vid ett matbord. 
Videos Goto - 


Details 


€m-chat-media-video-x4LTUfQX4Zd372eKOAyQx.mov | 2021-02-09 17:55:52 +01:00 


Save 

Name: cm-chat-media-video- 
x4L1UfQX4Zd372eKO0AyQx.mov 

Type: Videos 

Size (bytes): 8 1585739 

Path: 00008101-0002192A1144001E files partial- 
bfu.zip/private/var/mobile/Containers/Data/ 
Application/ 
C7B1980E-7B2D-4ABE-97BC-5BC35109F320/ 
Library/Persistent/SCMedia/cm-chat-media- 
video-x4L1UfQX4Zd372eKO0AyQx.mov 

Created: 2021-02-09 17:55:52(UTC+1) 

Accessed: 2021-02-09 17:55:52(UTC « 1) 

Modified: 2021-02-09 17:55:52(UTC « 1) 

Changed: 

Deleted: 

Extraction: Legacy 

MD5: 4410bf5bab6b6ce8bd1199580928e87c 

Source file: cm-chat-media-video- 


x4L1UfQX4Zd372eK0AyQx.mov 


> =» x 0091/0009 ^ 4| ———— 


GET: Protokoll óver 
Polisen husrannsakan 
Enhet 


Region Stockholm, Grova brott 1 PO Sthlm Nord 


Signerat av 


Tove Lundstróm 
Signerat datum 


2021-02-25 


Diarienummer 


5000-K189802-21 


Åtgårder 

Beslut 

Typ Datum och tid Beslutsfattare 
Husrannsakan 2021-02-25 12:27 Wennergren, Anna 
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Polisen 


Telefongenomgang 


2021-5000-BG24357-10 Apple Iphone X 
5000-K189802-21 


Polisen Region Vast 


2023-09-13 
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1 Syfte/Uppdrag 


Genomgáng av beslag 2021-5000-BG24357-10, en telefon med tillhörande SIM-kort beslagtagen fran 
Mahad Ali 2021-02-25 kl 14.50 i arresten, polishuset Karlstad tillsammans med andra föremål tillhörande 
Mahad. Mahad Ali hade då stoppats och kontrollerats i en bil 2021-02-25 kl 11:15 i Töcksfors vid grånsen 
mellan Norge och Sverige. I bilen fanns ytterligare tre personer, S Aleksic, F Kücükgól samt M Ali. I samband 
med kontrollen verkstålldes ett anhållningsbeslut mot Mahad för försök till mord. Han greps och fördes till 


polishuset, Karlstad. 


Syfte med undersökningen år att utröna om det finns information av intresse för utredningen i den data 


som extraherats från telefonen. 
2 Metod 


Genomgången av telefonen följer de rubriker/mappar som år satta av telefontömningsprogramet UFED. 
Det finns flertalet rubriker/mappar som har ett irrelevant innehåll för utredningen, dessa rubriker kommer 
att granskas men inte presenteras i genomgången. 


Fokus för undersökningen år tidsperioden från 2020-11-01 till 2021-02-25 då telefonen togs i beslag. 


Av telefontömningens tidslinje att döma sker ingen aktivitet i telefonen under november och början av 
december utan första aktivitet i telefonen sker 2020-12-27 då ett utgående Snapchatmeddelande skickas 
från kontot ”mahadmose4211” till ”mirettemilaja”. Det framstår som tydligt att telefonen tidigare brukats 


av en anvåndare vid namn Pontus Lindstrand. 


3 Premisser 


3.1 Information om enheten 


Den beslagtagna telefonen år av mårket Apple iPhone X. 


Då telefonen töms på sitt innehåll år telefonnummer +46790223662 aktivt i telefonen. 


Inställt Apple ID år pon n Q hotmail.com samt pel 1992 e hotmail.com. 


Nedan följer ett utdrag på information om enheten från undersökningsprotokollet. 
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Uppráttad av 


Henrik Norlin, Utredare Grova Brott 


Datum Diarienr Saknr Version 
2023-09-13 5000-K189802-21 01.00 


Device Information 


ega 
Phone Settings 


Message Retention Duration 
Location Services Enabled 


Tethering 
Last Hotspot Activii 
Model number 
Last user ICCID 
Last used MSISDN 


Forever 
True 


2021-02-19 23:28:47(UTC#0 


89462048009065443955 


ICCID 
MSISDN 
Serial 
IMEI 
Unique ID 


+46790223662 
89460140191119029625 


AirDrop ID 
Time Zone 
Apple ID 
¡Cloud account present 
Advertising Id (IDFA) #1 
Device Name 
Bluetooth device address 
Apple ID 
ICCID 
MSISDN 
IMSI 
OS Version 
Detected Phone Model 
Network Interfaces 
Wi-Fi MAC address 
MAC address 
MAC address 
Bluetooth device address 


373td2e35eced361b8ff2ca4a54ab42071a93345 
89538538f17a 


[por 
== - 


74:9E:AF.78:71:39 
= = AF:70: = = 
TELTE 
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Foljande innehall ar extraherat fran enheten: 


Content 


Data 


ii Activity Sensor Data 200 ® Applications Usa... 11469 BB Calendar © Call Log 


DÉI Cell Towers WW Chats @ Contacts d Cookies 


un 
© 


(7 Device Connectivity 866 L] Device Events 18928 9 Device Locations 60619 Ka Emails 


fö Installed Applications 565 Fa Instant Messages B Log Entries # Notes 


| 


@ Passwords Q Searched Items uy Social Media 3, User Accounts 


A Web Bookmarks O Web History @ Wireless Networks 26271 


i 


Data Files 


== Applications B Archives S Databases 


å Documents B Images 


Rubriker och relevant inneháll fór utredningen redovisas nedan. 


3.2 Telefondata 
3.2.1 Activity Sensor Data 


Under denna rubrik finns det 200 poster. Aktivitet finns registrerad i telefonens halsoapp fran 
2021-02-12 till 2021-02-25. Det finns bl.a. registrerad aktivitet fór telefonen vid brottstiden 
2021-02-16 kl 17 — 21. Detta visar att telefonen varit i rórelse under timmarna runt tiden fór 


brottet. Dessa timmar redovisas har: 
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Henrik Norlin, Utredare Grova Brott 


Uppráttad av 


Dokument 

Telefongenomgáng 

Datum Diarienr 
2023-09-13 5000-K189802-21 


sf HEMLIG ] 


Saknr Version 


01.00 


Goto + 


373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Health/healthdb secure.sqlite : Ox6FA64 (Table: 


» Activity Sensor Data 

From: 2021-02-16 17:00:00(UTC « 1) 

To: 2021-02-16 18:00:00(UTC « 1) 

Device name: 

Source: Health 

Total samples count: 2 

Max heartrate: 

Distance Traveled: 25.32 

Flights Climbed: 

Max speed: 

Name: 

Extraction: Legacy 

Manually decoded: False 

Source file: 

objects, samples; Size: 602112 bytes) 
Graph 
Data type 
Total 


@ Distance Traveled — @ Steps 


r 


2021-02-16 17:48:16 


Table 


Timestamp 
2/16/2021 5:49:16 PM 


2/16/2021 5:49:16 PM 


Units Value 


Meters 25.32 


Steps 34 
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Uppráttad av Datum Diarienr Saknr Version 
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» Activity Sensor Data Goto - 
From: 2021-02-16 18:00:00(UTC+1) 
To: 2021-02-16 19:00:00(UTC « 1) 
Device name: 
Source: Health 
Total samples count: 4 
Max heartrate: 
Distance Traveled: 66.35 
Flights Climbed: 
Max speed: 
Name: 
Extraction: Legacy 
Manually decoded: False 
Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Health/healthdb secure.sqlite : Ox6FA20 (Table: 
objects, samples; Size: 602112 bytes) 
Graph 
Data type 
Total 


@ Steps — 9 Distance Traveled 


2021-02-16 18:19:00 


Table 


Timestamp 

2/16/2021 6:20:00 PM 
2/16/2021 6:57:28 PM 
2/16/2021 6:20:00 PM 


2/16/2021 6:57:28 PM 


T T T 


2021-02-16 18:29:00 2021-02-16 18:39:00 2021-02-16 18:49:00 
Units Value 
Steps 88 
Steps 9 
Meters 62.3 
Meters 4.05 
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» Activity Sensor Data Goto ~ 

From: 2021-02-16 19:00:00(UTC+1) 

To: 2021-02-16 20:00:00(UTC+1) 

Device name: 

Source: Health 

Total samples count: 9 

Max heartrate: 

Distance Traveled: 8 208.8 

Flights Climbed: 1 

Max speed: 

Name: 

Extraction: Legacy 

Manually decoded: False 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Health/healthdb secure.sqlite : 0x6F998 (Table: 


objects, samples: Size: 602112 bytes) 


Graph 


Data type 
Total 


@ Steps 


€ Distance Traveled 8 @ Flights Climbed 


r T 


2021-02-16 19:07:45 2021-02-16 19:17:45 


Table 


Timestamp Units Value 
2/16/2021 7:08:45 PM Steps 118 
2/16/2021 7:23:25 PM Steps 101 
2/16/2021 7:45:47 PM Steps 93 
2/16/2021 7:56:13 PM Steps 8 
2/16/2021 7:08:45 PM Meters 77.77 
2/16/2021 7:23:25 PM Meters 68.35 
2/16/2021 7:45:47 PM Meters 57.16 


2/16/2021 7:56:13 PM Meters 5.52 


2/16/2021 7:32:46 PM Floors 1 


T T 


2021-02-16 19:27:45 2021-02-16 19:37:45 2021-02-16 19:47:45 
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» Activity Sensor Data Goto ~ 
From: 2021-02-16 20:00:00(UTC+1) 
To: 2021-02-16 21:00:00(UTC+1) 
Device name: 
Source: Health 
Total samples count: 6 
Max heartrate: 
Distance Traveled: 1493.07 
Flights Climbed: 
Max speed: 
Name: 
Extraction: Legacy 
Manually decoded: False 
Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Health/healthdb secure.sqlite : 0x6F866 (Table: objects, samples; 


Size: 602112 bytes) 


Graph 


Data type 
Total 


@ Steps © Distance Traveled 


r 


2021-02-16 20:26:18 


Table 


Timestamp Units Value 
2/16/2021 8:27:18 PM Steps 803 
2/16/2021 8:37:19 PM Steps 988 
2/16/2021 8:47:19 PM Steps 221 
2/16/2021 8:27:18 PM Meters 580.39 
2/16/2021 8:37:19 PM Meters 749.96 


2/16/2021 8:47:19 PM Meters 162.72 


T 


2021-02-16 20:36:18 


T 


2021-02-16 20:46:18 
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3.2.2 Call log 


Under denna rubrik finns det 313 poster. 
Se bilaga 1 till denna genomgång där 47 poster redovisas. 


2020-02-17 finns ett inkommande samtal via Facebook Messenger registrerat till användaren 
”Pontus Biscaard”, vilket är ett konto som brukas av Pontus Lindstrand. Därefter finns inga 
samtal registrerade förrän 2021-02-13 kl 00:34:18 då flera Facetimesamtal med motparten 
”Valentina” sker. 


2021-02-15 kl 13:27:21 och framåt i tid finns ett stort antal utgående och inkommande samtal 
i WhatsApp där brukaren av kontot heter Mahad. 


2021-02-16 kl 14:02:12 finns ett utgående samtal i WhatsApp från Mahad till okänd 
WhatsAppanvändare (252615192542@s.whatsapp.net). Samtalet varar i 6 min och 51 sek. 


2021-02-18 kl 15:02:21 finns ett utgående samtal till kontakten ”Mamma” med telnr “2241. 
Mahad Alis mamma Hawa Mohamud har i passansökan 2022-12-27 angett detta 
telefonnummer som kontaktuppgift. 


Som Bilaga 1 till denna telefongenomgång biläggs lista över samtalslogg (Call log) där samtliga 
samtal mellan 2021-02-13 och 2021-02-20 redovisas. Därefter redovisas ett antal utvalda 
samtal genom WhatsApp som visar att kontot Mahad fortfarande brukas i telefonen. Likaså 
ett antal samtal med ”Mamma”. 


Sista utgående samtal sker 2021-02-25 kl 09:58:33. Mahad grips 2021-02-25 kl 11.30 enl 
protokoll över frihetsberövandet. 


3.2.3 Contacts (kontaktbok) 


I telefonen finns 1077 kontakter. Bl.a. följande (se även bilaga 1): 

Snapchat-kontakten ”mahadmose”. 

#2241 inlagd som ”Mamma” 2021-02-18 (samma telnr som Mahad Alis mamma angett som 
kontaktnummer vid passansökan 2022-12-27). 

“4713 inlagd som "Mamma" (enligt DurTva Rina Arfwidsson, mamma till Pontus Lindstrand). 
*6449 inlagd som ”Valentina” (enligt DurTvá Valentina Hanna f -98, folkbokförd i Grödinge). 


3.2.4 User accounts 


I telefonen finns konton kopplade till Pontus Lindstrand: 
ApplelD: pon] and Q hotmail.com 

iTunes: pel 92 @hotmail.com 

Hotmail: pon and hotmail.com 

Cloudkit: por and Q hotmail.com 

Messages: pel O92 @hotmail.com 


I telefonen finns WhatsApp-konto ”Mahad” med User Id: 46790223662@s.whatsapp.net. 
Instagramkonton: ”mahadmose”, ”orte.n421” samt ”pontuslindstrand”. 
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Snapchatkonto med namnet ”thugz Mansion Å " och Username: "mahadmose4211". 


I materialet ser det ut att finnas tre instagram konton inloggade på telefonen, det ena kontot 
år ”pontuslindstrand”, det andra ”mahadmose” och det tredje ett som heter ”orte.n421”. Alla 
konton år inloggade och går dårför att våxla emellan, se bilder nedan på den fysiska 
telefonen. 


Se åven bilaga 1. 


6 mahadmose ~ 


12 109 
o Inlågg Följare 


MVWOTW Mu TG 


Visa översättning 


Redigera profil 


109 Fóljare Lägg till nära vänner 


| AR pontuslindstrand 


orte.n421 


+ Liga till konto 


Å pontuslindstrand * Et 


41 173 169 
Inlågg Foljare Följer ` Meddelanden 


GBG 
Bram lågg - Sv 


Ariana Grande 
Tryck om du vilbehatta 


Khloe Kardashian 
Tryck om du vill chatta 


REHAB HASSAN | ZA bilin, 3 
Tryck om du vill chatta 


173 Följare Laga till nara vänner 


therock 
Tryck om du vill chatta 


ESTA 
fi mahadmose | 
á Taylor Swift 


Tryck om du vill chatta 


erte.n421 


Lägg till konto 
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3.2.5 Cell towers 


Under rubriken kontakter finns 6628 poster. Dessa år daterade mellan 2021-02-21 och 2021- 
02-26. Alltså inga cellpositioner under brottstiden. Innehållet bedöms dårför sakna betydelse 
för utredningen. 


3.2.6 Device Connectivity 


I telefonen finns 866 poster då telefonen kopplar upp mot andra enheter. Endast 4 av dessa 
har registrerade tidsståmplar. 


2021-02-16 kl 23:19:38 kopplar telefonen via bluetooth upp mot ”Balosaudi”. 
2021-02-17 kl 21:04:41 kopplar telefonen via bluetooth upp mot ”PASSAT GTR”. 
2021-02-20 kl 16:18:28 kopplar telefonen via bluetooth upp mot ”Pins Free” som år ett 
headset. 

2021-02-25 kl 09:54:33 kopplar telefonen via bluetooth upp mot ”My Volvo Car”. 


Se bilaga 1. 


3.2.7 Device Events 


Informationen visar händelser på telefonen, dvs når displayen öppnas eller stängs, om 
telefonen låses upp eller flygplanslåge såtts på, orienteringen på skårmen åndras etc. 
Telefonen har lagrat 18928 sådana håndelser under tiden från 2021-02-12 till 2021-02-27 
varav 1169 poster avser 2021-02-16. 


Telefonen hanteras och brukas således frekvent under dygnet 2021-02-16. Man kan se ett 
längre uppehåll i aktivitet mellan kl 04:26:24 och kl 09:48:00. I övrigt hanteras telefonen 
frekvent. Den stora mångden data gör att posterna ej bilåggs dokumentet. 


3.2.8 Device Location 


Telefonextraktionen visar 60619 poster. Följande poster redovisas och bedöms ha betydelse 
för utredningen: 


2021-02-14 kl 06:04:01 söks i Google Maps i Safari på en plats som visar sig vara Skanstull i 
Stockholm. I samband med att denna plats visas i telefonen har det gjorts Google-sökningar 
på just Skanstull. 


2021-02-15. Inga platser med koordinater finns i telefonen för datumet 2021-02-15. Dock 
finns sökningar gjorda i Google Maps på ”eddie jobe”. 


2021-02-16 finns 2 poster. 

Dels från kl 21:42:05 då det görs en sökning i Google Maps som visar sig vara Tulegatan 14, 
Sundbyberg. Koordinaterna visar en vy från Streetwiew mot Tuletorget och brottsplatsen i 
detta årende. 

Dels från kl 22:56:36 då det görs en sökning på Booking.com. Koordinaterna visar platsen för 
Quality Hotel Friends vid Friends Arena i Solna, Stockholm. 
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1 
I | 
Ee) | 


a 


eer 


FEN sökningen kl 21:42:05 (Tuletorget). 


2021-02-17 finns frán kl 16:32:23 och framát till 2021-02-27 kl 12:12:59 ett stort antal Device 
locations som positionerar telefonen (27 694 positioner av typen ”visited”). Detta material 
omfattar i tabellform totalt 1849 sidor vilket gór att materialet ligger i sidomaterialet 
(telefontómningen i UFED). De positioner som bedöms vara av vikt för utredningen redovisas 
i kartformat i brukaranalysen avseende Mahad Ali samt i årendesammanstållningen. 


Device locations 2021-02-14 kl 06:04:01 till 2021-02-16 kl 22:56:36 redovisas i bilaga 1. 


3.2.9 Searched Items 


2021-02 14 görs sökningar på ”Skanstull”, ”Skanstull mc” och ”Skanstull öppet nu” under 
morgonen (kl 06:03:18 till kl 06:06:12). Detta på Google och Google maps. Ett urval visas i 
bilaga 1. 


2021-02-15 under kvållen görs sökningar på ”eddie jobe” och ”eddie j” samt ”kva saltvik”, 
”håktet göteborg”. 


2021-02-16 görs sökningar på relaterade till ”eddie jobe instagram” fram till kl 02:22:29. 
KI 16:42:35 görs sökning pa ”Branco - JIGGY (feat.Yasin) (Original)” 


2021-02-18 strax efter midnatt görs sökningar på Google Maps på platser kopplade till Oslo 
samt Lillestróm, ca 2 mil óster om Oslo, i Norge. 


2021-02-19 kl 13:45:19 görs sökning på Frivårdskontoret Fridhemsplan i Google Maps. 


3.2.10 Chats 


Under denna rubrik finns 237 poster. 


Telefongenomgång 2021-BG24357-10 , 2023-11-01 14:47 diarienr: 5000-K189802-21 135 


$ Polisen a sef HEMLIG 


Uppráttad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


Snapchatkonversation mellan kontot i telefonen ”mahadmose4211” och motparten ”Bille”. 
2021-02-25 skickar mahadmose4211 en bild (troligen skårmdump) med en text som handlar 
om Mahad och att han ligger bakom mord i Tynnered. 


Participants (2) 


Bille 
ev 92253ee8-adbe-4d44-87a8-438a8274f5d4 


mahadmose4211 (ovner) 


9 9 Cal0df2d-08df-4a1c-b8fe-96f409f9b03d 


Conversation 


— v Select/Deselect all 9 messages 


mahadmose4211 
e 
0720069501 
021-01-24 01:17:33(UTC+1) 
Sources (2) 
Bill 
Chan 
Hj 2021-02-12 21:31:17(UTC+1) 
Our! 2 
dmo: AU 
maha se42 
E3 2021-02-25 01:20:36(UTC+1) 
Sources (3) 


25 06:10:18(UTC+1) 


a mahadmose4211 [^] 
ES 2021-02-25 06:52:46(UTC+1) 


Sources (2) 
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Version 


01.00 


23:26 mil AG 8 


4,” bualómeerbpori en storanama X 
i Tynnered fran M-falangen 
Mahad kallas for woria G nu 
han har muckat de ar mangai 
Frolunda som Ar radda for hans 
namn de ar han som ligger 
bakom alla mord Tynnered 
han år tjockens hitman han 
satt inne 2ár sen nu nar han 
kom ut de borja handa saker 
de ar sakert han som ligger 
bakom den skjutning i Sthlm 
riktigt fet kille. Dom har sma 
snorungarna i Frolunda suger 
av honom och deras som 
kallade áldre ziad år livradd för 
honom 


Plus han har manga kontakter 
han sjålv kör över G falangen 
han har gjort så mkt mer han år 
kånde runt Sverige filterlös kille 
minst han har gjort 10-11 mord 


Skicka meddelande 


Förstoring av den bild som skickas 2021-02-25 kl 01:20:36 från mahadmose4211. 
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Snapchatkonversation mellan mahadmose4211 och motparten ”mirettemilaja”. Det förefaller som att de 
har nágon sorts kárleksrelation. Konversationen har ett inneháll frán 2021-01-16 och fram till att Mahad Ali 
grips 2021-02-25. Samtliga meddelanden redovisas inte dá flera ár av privat karaktár och saknar betydelse. 


I konversationen finns inga meddelanden mellan 2021-02-16 kl 11:35:24 och 2021-02-18 kl 01:16:36. 


2021-02-24 kl 18:52:56 skriver ”mirettemilaja” ett meddelande med innehállet ”Mahad abdullahi ali!”. 
Mahadmose4211 svarar med meddelandena ”Mirette Bollstróm” och ”Studievågen 43 vad hánder”. 
Mirettemilaja skriver dá "Hahahah de meningen att du skulle tro jag va arg for jag sa hela ditt namn ju”. 
(Mahad Ali's, pnr: 961025-0731, fullstándigha namn år enl. folkbokföringen Mahad Abdullahi Ali). 


2021-02-24 kl 21:07:17 skriver mahadmose4211 meddelandet ”Åker Oslo baby” och fortsåtter beskriva att 
han åker med några vånner. 


2021-02-24 kl 23:38:58 skickar mahadmose4211 bild (troligen skårmdump) med en text som handlar om 
Mahad och att han ligger bakom mord i Tynnered. 


2021-02-25 kl 10:00:39 skickar mahadmose4211 ett meddelande: ”Hej baby vi år i grånsen vi fick inte 
komma inn”. Dårefter avslutas konversationen. 


Participants (2) 


mirettemilaja 
> S aed38a7a-f7b8-4cb1-bc59-fef2612ea334 


mahadmose4211 (owner) 
> * cal0df2d-08df-4a1c-b8fe-96f409f9b03d 


Conversation 


— Y Select/Deselect all 221 messages 


e mirettemilaja 


Mahad abdullahi ali! 
BY 2021-02-24 18:52:56(UTC+1) 
Sources (2! 
mahadmose4211 Q 
Va hahahha 
ER 2021-02-24 18:53:05(UTC+1) 
Sources (2) 
mahadmose4211 a 
Mirette Bollström 
ER 2021-02-24 18:53:20(UTC+1) 
Sources (2) 
mahadmose4211 
Studievágen 43 vad hánder 
ER 2021-02-24 18:53:20(UTC+1) 
Sources (2) 
mir ilaj 
e ettemilaja 


Hahahahha du ár inte rolig att pranka 


e 2021-02-24 18:54:15(UTC#1) 


Sources (2) 
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— Y Select/Deselect all 221 messages 


mirettemilaja 


Hur går de baby 


2021-02-24 21:01:13(UTC+1) 


e 


mahadmose4211 


Aker Oslo baby 


B 2021-02-24 21:07:17 (UTC +1) 


Sources (2) 


mirettemilaja 
Nu? 


EN 2021-02-24 21:07:24(UTC+1) 


mahadmose4211 
Aaa baby 


ER 2021-02-24 21:07:45(UTC+1) 


Sources (2) 


— v Select/Deselect all 221 messages 


A mirettemilaja 


Okii baby , áker du själv ? 
2021-02-24 21:08:12(UTC+1) 
Sources (2) 
mahadmose4211 
Nej med nåra vänner 
ER 2021-02-24 21:08:27(UTC+1) 
Sources (2) 
Q mirettemilaja 
Okii baby kor fórsiktig 
ER 2021-02-24 21:08:58(UTC+1) 
Soul 2 | 
mahadmose4211 
vev 
EX 2021-02-24 21:09:35(UTC+1) 
Q mirettemilaja 
Ar du påvåg nu baby 
EN 2021-02-24 21:32:22(UTC+1) 
Sources (2) 
mahadmose4211 
Snart baby 
EN 2021-02-24 21:45:24(UTC+1) 
a mirettemilaja 


Okej ålsking , åt innan och köp snacks och dricka till resan Y 


2021-02-24 21:49:17(UTC+1) 


a 


Sources (2) 
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Conversation 


— v Select/Deselect all 221 messages 


ER 2021-02-24 23:49:25(UTC+1) 


Págud assá de barn fasoner 


ER 2021-02-24 23:51:32(UTC+1) 


23:26 ail AG 8 


4,” Dualómeerbpori en storanama X 


i Tynnered fran M-falangen 
Mahad kallas for woria G nu 
han har muckat de ar manga i 
Frölunda som år radda för hans 
namn de år han som ligger 
bakom alla mord Tynnered 
han år tjockens hitman han 
satt inne 2ár sen nu når han 
kom ut de börja hånda saker 
de år såkert han som ligger 
bakom den skjutning i Sthlm 
riktigt fet kille. Dom hår små 


snorungarna i Frölunda suger 
av honom och deras som 
kallade åldre ziad år livrådd för 
honom 


Plus han har många kontakter 
han sjålv kör över G falangen 
han har gjort så mkt mer han år 
kånde runt Sverige filterlös kille 
minst han har gjort 10-11 mord 


Skicka meddelande 


Förstoring av bild som skickas 2021-02-24 kl 23:38:58. 


ER 2021-02-24 23:38:58(UTC+1) 
Sources (3) 
mahadmose4211 


Horubgar har inget liv 
B 2021-02-24 23:39:32(UTC+1) 


Sources (2 


mahadmose4211 
Inget liv assá haha 


ER 2021-02-24 23:51:09(UTC+1) 
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Conversation 


— v Select/Deselect all 221 messages 


mahadmose4211 


Hej baby vi år i grånsen vi fick inte komma inn 
e 2021-02-25 10:00:39(UTC 1) 
Sources (2) 
Q mirettemilaja 
Va ska ni góra nu dá baby ? Ska ni áka hem elker vaddá 
2n 2021-02-25 10:59:37(UTC+1) 
Sources (2) 
mahadmose4211 
Aaa baby vi ska áka hem nu snart 
a3 2021-02-25 10:59:54(UTC+1) 
Sources (2 
Q mirettemilaja 
Har ni ens sovit baby 
2021-02-25 11:01:31(UTC+1) 
Sources (2) 
mahadmose4211 
Nej bany 
2021-02-25 11:09:44(UTC+1) 
Sources (2) 
3.2.11 Istalled Applications 


Det finns 565 installerade appar i telefonen. Bl.a. följande: 
Booking.com 

Instagram 

Facebook Messenger 

Snapchat 

WhatsApp Messenger 
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Installed Applications (5) 


Purchase Date 
2021-02-13 
14:18:31(UTC+1) 


Application ID 
411EC78F- 
FEFA-4DB4- 


plication/A6680 
F70-9705- 
4D1A-9BA7- 
8190E5273C2D 
fiTunesMetadat 


ata/Application/ 
411EC78F- 
FEFA-4DB4- 
91FD- 
406F1081B39A 


Me ler E y Purchase Date 

plication ID: 2021-02-12 
873D9605- 3 20:25:04(UTC+1) 
0739-4887- 


89D4- 
po 5A18945 


373fd2e35eced 
361b8ff2ca4a5 

4ab4207fa9334 
5_files_full.zip/p 
rivate/var/contai 


=. 
373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5 files full.zip/p 


CDE15A18945 

4/.com.apple.m 
obile_container 
_manager.meta 
data plist ` 0x8B 
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Instagram 


Application ID: 
7DCF1696- 
B768-4516- 
96A4- 
AE 


com.burbn.insta 
gram 
Source: 


Version: 174.0 
Mode: 


Fo HON iz 
ieation e 


ytes): 0 
E Yes 
Source file: 
373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5 files full.zip/p 
rivate/var/contai 
ners/Bundle/Ap 
plication/9FB75 
013-E56A- 
4C08-B7D1- 
BEEC0C19711 
3fiTunesMetad 
ata.plist : 0x384 
(Size: 1354 
bytes) 
373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5 files full.zip/p 
rivate/var/mobil 
e/Containers/D 
ata/Application/ 
7DCF1696- 
B768-4516- 
96A4- 
16CD467E46E 
1/.com.apple.m 
obile container 
_manager.meta 
data.plist : 0x8B 
(Size: 377 


bytes) 
373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5 files full.zip/p 
rivate/var/mobil 
efLibrary/TCCIT 
CC.db-wal : 
OxD8184 
(Table: access, 
Size: 889952 


Purchase Date 
2021-02-12 
20:24:47(UTC#1) 


Microphone 
Camera 
Photos 
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Snapchat 
Application ID: 
77919778- 
DC8B-4FED- 
9F7E 


X B276E89 


com.toyopagro 
up.picaboo 
Source: 


Source file: 
373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5 files full.zip/p 
rivate/var/contai 
ners/Bundle/Ap 
plication/4BA20 
511-E741- 
4964-A280- 
4EC38DFF02C 
1/iTunesMetad 
ata.plist ` 0x383 
(Size: 1353 
bytes) 
373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5_files_full.zip/p 
rivate/var/mobil 
e/Containers/D 
ata/Application/ 
77919778- 
DC8B-4FED- 
9F7E- 
ODB1B276E89 
C/.com.apple.m 
obile_container 
_manager.meta 
data .plist ` 0x8B 
(Size: 381 


bytes) 
373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5 files full.zip/p 
rivate/var/mobil 
elLibrary/TCC/T 
CC.db-wal : 
0xD824D 
(Table: access; 
Size: 889952 
bytes) 

Artifact Family: 


Reposto 
Path: 


Purchase Date 
2021-02-12 
20:24:39(UTC+1) 


Launches 
Activations 

Last Launch 
Active Time 
00:00:00 
Background Time 
00:00:00 


Lifestyle 
ChatApplicatio 
ns 
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WhatsApp 
Messenger 
Application ID: 
144881C4- 
D32C-48D0- 
9C4E- 
OF08D5C89F29 
net.whatsapp. 
WhatsApp 


Foreground 
Application Size 


pas 0 
coded: Yes 
Source file: 


Purchase Date 
2021-02-12 
20:24:18(UTC+1) 
Install Date 

Last Modified 
Deleted Date 


iCloud 
Contacts 
Microphone 
Camera 
Photos 


Launches 
Activations 

Last Launch 
Active Time 
00:00:00 
Background Time 
00:00:00 


Categories 


SocialNetworki 


ng 
ChatApplicatio 
ns 


373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5 files full.zip/p 
rivate/var/contai 
ners/Bundle/Ap 
plication/24461 
249-31D0- 
40C0-BFF1- 
EAB8D37A364 
5/iTunesMetad 
ata.plist : 0x38F 
(Size: 1383 
bytes) 
373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5 files full.zip/p 
rivate/var/mobil 
e/Containers/D 
ata/Application/ 
1A4881C4- 
D32C-48D0- 
9C4E- 
OFO8D5C89F29 
/.com.apple.mo 
bile_container_ 
manager.metad 
ata.plist : 0x8B 
(Size: 379 


Source: 


bytes) 
373fd2e35eced 
361b8ff2ca4a5 
4ab4207fa9334 
5 files full.zip/p 
rivate/var/mobil 
e/Library/TCC/T 
CC.db-wal : 
OxD8006 
(Table: access, 
Size: 889952 
bytes) 

Artifact Family: 
Source 


Repository 
Path: 


3.2.12 
1 anteckning finns. Denna år skapad 2021-02-12 kl 23:48:07 och lyder "4595 kod”. Se bilaga 1. 


Notes 


3.2.13 Web history 


Denna rubrik inneháller 3897 poster. 


Av vikt fór utredningen kan námnas att det gjorts besók pá epost-klienten Outlooks inbox 2021-02-13 
under namnet ”E-post — mahad alii — Outlook”. 


2021-02-13 kl 19:21:05 har också besök gjorts på Dropbox dar förundersökningsprotokollet i årende 5000- 
K737009-20 avseende ett mord på Sylvestergatan i Älvsjö 2020-06-20 finns nedladdat. 


2021-02-14 kl 03:29:21 har det gjorts en sökning på biluppgifter.se på fordonet JRG240, en bil som i januari 
2021 kopplas till kriminella nåtverk i Göteborg. 


Det görs ett antal sökningar på regnr genom besök på websidan Biluppgifter.se samt relaterade frågor mot 
registrerade ågare på merinfo.se. 
2021-02-15 kl 14:58:39 söks på JSN49S. 


Telefongenomgång 2021-BG24357-10 , 2023-11-01 14:47 diarienr: 5000-K189802-21 145 


$ Polisen a sef HEMLIG 


Uppråttad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-15 kl 14:59:09 söks på NHCO77. 
2021-02-15 kl 18:51:04 sóks på CTM45U. 
2021-02-15 kl 19:03:39 sóks pá MXP72X. 
2021-02-15 kl 19:46:52 sóks pá LLL93L. 


2021-02-16 kl 13:58:39 besóks booking.com med en sókning pá Quality Hotel Friends i Solna. Det 
framkommer att det kl 14:01:02 besöks sista steget i bokningen men det går inte att utlåsa på 
webhistoriken för vilka datum bokningen besöker sista steget. 


2021-02-16 kl 15:09:39 besöks taxijakt.se. Det går inte av webhistoriken utröna vilken resa som åsyftas. 


2021-02-16 kl 16:42:35 besöks Youtube dår en musikvideo med artikeln Branco — JIGGY (feat. Yasin) 
(Original) visas. 


2021-02-16 kl 18:01:20 besöks Youtube dår en musikvideo med artikeln Branco — JIGGY (feat. Yasin) 
(Original) visas. 


2021-02-16 kl 20:24:28 besöks websidan aftonbladet.se med artikel om skottlossning i Sundbyberg med en 
skadad. Artikeln handlar om mordförsöket på Tuletorget / restaurang Amida. 


2021-02-16 kl 20:30:23 söks websidan flashback på Google följt av besök i trådarna ”aktuella åmnen” och 
”nya åmnen”. 


2021-02-16 kl 21:01:59 besöks åter websidan aftonbladet.se med artikel om skottlossningen i Sundbyberg. 
Artikeln år en uppdaterad version om mordförsöket på Tuletorget / restaurang Amida. 


2021-02-16 kl 21:04:44 påbörjas en serie besök på websidan flashback.org som kl 21:05:44 mynnar ut i en 
besök på tråden ”Skottlossning Tulegatan Sundbyberg 16 feb 2021” till kl 21:10:55. 


2021-02-16 kl 21:18:48 besöks återigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 21:31:15. 


2021-02-16 kl 21:34:05 besöks återigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 21:41:45. 


2021-02-16 kl 21:42:05 besöks googlemaps med en streetwiew-bild från Tulegatan i riktning mot 
Tuletorget. 


2021-02-16 kl 22:02:15 besöks återigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 22:08:30. 


2021-02-16 kl 22:08:38 besöks aftonbladets hemsida med artikeln om skottlossning i Sundbyberg till kl 
22:11:00. 


2021-02-16 kl 22:22:19 besöks aftonbladets hemsida med artikeln om skottlossning i Sundbyberg till kl 
22:22:40. 
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2021-02-16 kl 22:22:50 besöks återigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 22:23:25. 


2021-02-16 kl 22:23:28 besöks aftonbladets hemsida med artikeln om skottlossning i Sundbyberg till kl 
22:27:45. 


2021-02-16 kl 22:33:25 besöks återigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 22:35:35. 


2021-02-16 kl 22:45:38 besöks aftonbladets hemsida med artikeln om skottlossning i Sundbyberg till kl 
22:45:39. 


2021-02-16 kl 22:45:50 besöks återigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 22:46:45. 


2021-02-16 kl 22:47:26 besöks aftonbladets hemsida med artikeln om skottlossning i Sundbyberg. 


2021-02-16 kl 22:52:00 besöks återigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 22:56:30. 


2021-02-16 kl 22:57:28 besöks aftonbladets hemsida med artikeln om skottlossning i Sundbyberg till kl 
22:58:35. 


Besöken på websidorna aftonbladet samt flashback med fortsåtter våxelvis fram till 2021-02-17 kl 
02:11:25. 


2021-02-17 kl 11:38:51 besöks återigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 11:38:55. 


2021-02-17 kl 15:16:40 besöks återigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 15:42:40. 


2021-02-17 kl 17:16:57 besöks återigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 17:17:40. 


2021-02-17 kl 17:53:05 besöks återigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 18:51:10. 


2021-02-17 kl 20:12:09 besöks booking.com som mynnar ut i en sökning på Quality Hotel Friends i Solna. 


2021-02-18 kl 00.16.05 påbörjas besök på Googles websida med sök på ”Oslo” vilket mynnar ut i besök på 
Oslo - Google Maps fram till kl 00:34:25. 


2021-02-18 kl 04:48:34 besöks återigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 05:29:10. 


2021-02-18 kl 16:33:40 besöks återigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 16:36:15. 
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2021-02-19 kl 01:19:43 besöks áterigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 01:55:35. 


2021-02-19 kl 02:26:19 besóks biluppgifter.se dar det górs en sókning pá pb TYK689 samt foljdfraga pá 
agaren vid tidpunkten i merinfo.se till 02:26:40. Denna person ar Kim Mats Bo Nyman. 


2021-02-19 kl 14:11:23 besöks áterigen websidan flashback.org och tråden ”Skottlossning Tulegatan 
Sundbyberg 16 feb 2021” till kl 14:11:50. 


2021-02-19 kl 14:46:23 till kl 14:48:34 besóks websidan Google Översått dar en svensk text matats in för 
översättning till engelska: 


Œ D 8 translate.google.com/?sl-sv&tl-en&text-grabbarna9620ska9620áka9620ditt?620igen96200ch9620knacka9620.. 2 Y OF £ 


Google Oversatt Gi 


XA Text m Bilder B Dokument @ Webbplatser 


Identifiera språk svenska engelska spanska v ur engelska svenska arabiska v 


grabbarna ska áka ditt igen och knacka pá dórren x the boys should go your way again and knock on the yr 
om han ár dár dá ta med honom door if he is there then take him 


+ Menade du: grabbarna ska åka ditigen och knacka pa dórren 
* om han ár dár dá ta med honom 


+ 


Mer information Mer information 


E 


2021-02-19 kl 16:04:23 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 16:04:35. 


2021-02-20 kl 01:19:57 besóks websidan booking.com med sókning pà Courtyard by Marriott Stockholm 
Kungsholmen. 


2021-02-20 kl 15:13:59 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 15:41:45. 


2021-02-20 kl 23:07:55 till kl 23:10 24 görs besök pa Google med sökningar på flera olika hotell i 
Stockholmsomrádet. 


2021-02-20 kl 23:31:19 górs besók pà websidan outlook som ár en E-postklient med titeln "E-post — mahad 
alii — Outlook". 


2021-02-21 kl 02:35:39 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 02:35:45. 


2021-02-21 kl 03:36:19 besóks áterigen websidan flashback.org och tráden "Skottlossning Tulegatan 
Sundbyberg 16 feb 2021" till kl 03:36:35. 
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2021-02-21 kl 03:37:42 besóks websida pá Youtube.com med sókning pá ”Efterlyst 2021 skottlyssning 
stundbyberg”. 


2021-02-21 kl 11:10:56 till kl 11:11:18 besóks websidan Google Oversátt dár en svensk text matats in fór 
översättning till engelska: 


CO @ translate.google.se/?hl=sv&s|=auto&tl=en&text=guys%20have%20info%20about%20he%20farah%20... € 


Google Översått 


X Text Bilder B Dokument @ Webbplatser 


svenska - identifierat svenska engelska spanska v engelska svenska arabiska v 


guys have info about he farah fick hóra att han och guys have info about he farah was told hat be and 3% 
hans vánner ár i krig mot nárgra andra som bor i his friends are at war with some others who live in 
omárdet mina vánner kánner dessa killar tror att de the omworld my friends know these guys think they 

kan ta fram farah men de år inte 100% leta efter ni can bring out farah but they are not 100% looking for 
ocksa om mer info you too for more info 


Mer information Mer information 


dü dü D Da < 


Skicka feedback 


2021-02-23 kl 01:37:11 till kl 01:39:48 besóks hyrbilsfirman Hertz's websida www.hertz.se. 

2021-02-23 kl 01:40:36 till kl 01:46:20 besóks hyrbilsfirman Sixt's websida www.sixt.se. 

2021-02-23 kl 03:13:55 till kl 03:22:42 besóks hyrbilsfirman Europcar's websida www.europcar.com. 
2021-02-23 kl 03:35:37 till kl 03:36:45 besóks hyrbilsfirman Avis's websida www.avis.se. 

2021-02-25 kl 11:00:47 till kl 11:06:50 besöks hotellbokningssidan booking.com dar man har sökt pá Best 
Western Gustaf Fröding Hotel €: Konferens i Karlstad. Det förefaller också som att besóket kl 11:06:42 år en 


sida med bokningsbekráftelse. 


Se samtliga omnámnda poster i bilaga 1. 


3.2.14 Documents 


Under denna rubrik finns 101 poster. 1 post bedóms vara av betydelse fór utredningen: 


2021-02-18 kl 16:34:10 skapades ett dokument i telefonen vilket fórefaller vara en skarmdump av en diskussionstrád 
pá websidan flashback.org. diskussionstráden handlar om skottlossningen pá Tuletorget i Sundbyberg. Posten visas i 
bilaga 1 men en forstoring av dokumentet visas har: 
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Dokument 

Telefongenomgáng 

Datum Diarienr Saknr 
2023-09-13 5000-K189802-21 


Version 


01.00 


= Logga in v 


flashback 


s 


M 
t 


T 


44 419 online 1 372 441 medlemmar 70145 737 inlágq 


Swish: 123 536 99 96 


Skottlossning Tulegatan Sundbyberg 16 
feb 2021 


«Svara == w f « 


Bi Idag, 06:06 + 


Furorem 
Medlem e 


Citat: 
*- Ursprungligen postat av dapravda 
Någon hår och aftonblaskorna skrev ju att han var i 
30-årsåldern och det år man inte om man år - som 
också någon hår skrev - född 1993. Så mycket kan i 
alla fall jag råkna. 


Ar man född 93 så år man 28 i år. Det vill jag nog påstå år 
i 30-årsåldern. 


ki Ø Citera 


B Idag, 06:21 + #134 


7 Reg: Feo 2015 
Eta nickomyra inlagg: 2 199 


Citat: 


< Ursprungligen postat av Tolvan 
För att inte tala om killen precis ovañför, som för 
övrigt förekommer i en del tradar har pa flashback. 


El*as ? I vilka trådar ? 


3 Ø Citera 


Flashback VPN 
Inga loggar-Alltid anonym 
www. flashback. nel 


li Idag, 06:35 + #135 
rustamannen koa Pre zoa 
Medlem e É 


Citat: 


+ Ursprungligen postat av Sam.Boyd 
Är inte det där ett hyffsat OK område? 


Sundbyberg är trevligt och lugnt , Storskogen (tuletorget) 
, lilla Alby ,Duvbo dessa områden är nog lugnaste 
områdena jag bott i Stockholm. Jag har bott på Knivsöder 
och det är värre mkt rån vandalisering ,mer fylla och 
party. 

Stora delar av Sumpan är som östra Östermalm. 

Rissne Hallon Ör lite mer action men lungt i stort sett. 


ki Ø Citera 
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Bi idag, 10:17 + +136 
— Tolvan EUM 
« Medlem e 2 
Citat: 
** Ursprungligen postat av nickomyra 
El*as ? I vilka trädar ? 
Nej, El”as år inte precis ovanför VDn, men J*e år. Du kan 
ta och googla. 
< @ Citera 
Bi Idag, 14:06 > #137 
Mediem e 
Inget nytt i media alls .. och vada misstankt 
skottlossning? Hur lang tid tar det att se att det ar fran 
skott ? 
Han verkar ha överlevt , men borde val anda va en större 
nyhet än en liten notis . Just för att det ändå hände 1930 , 
i ett lugnt omráde pá ett upplyst torg , med massa folk i 
nárheten . 
< e» Citera 
Bi Idag, 15:18 > #138 
Furorem Al 
Medlem & 
Enligt PM ståmmer det att han heter Kim född 93. Han år 
från Göteborg. 
< Ø Citera 
«Svara w f < | < 12v 
Stöd Flashback 
3.2.15 E-mails 
Under denna rubrik finns 59 poster. Mottagande mailadress är ponp and hotmail.com. 


Följande mail bedöms vara av betydelse för utredningen: 
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2021-02-12 kl 17:29:03 skickas ett meddelande frán Team Snapchat till 
on and@hotmail.com om att någon loggat in på hans konto ”slajfarn” från en Iphone 12: 


» Email 


Account: po and@hotmail.com 

Snippet: [https://storage.googleapis.com/email-media/Hijack Email Header.png] Har precis loggat in! Hej slajfarn, det ser ut 
som om nágon loggade in pa ditt konto fran en enhet som heter "¡Phone 12" den den 12 februari 2021 kl. 16:29:00 
UTC. Inloggningen skedde nágonstans i narheten av Gothenburg, Sverige (IP = 83.187.176.104). Om detta var du kan 
du bortse från detta mejl, du behöver inte göra något ytterligare. Om det inte var du bör du ändra ditt lösenord i 
Snapchat-appen eller på vår s 

Folder: 194B5D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Inloggning till Snapchat på den 12 februari 2021 

Timestamp: 2021-02-12 17:29:03(UTC+1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index : 0x80850 
(Table: messages: Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
0x6FA57 (Table: addresses; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-A08E-F68D57BFD01E.mbox/Messages/7B4610B1-8033-4CB9- 
B5F9-29C1D5E857F7.emlx : 0x0 (Size: 13695 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
0x17F96 (Table: mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index : 0xB42B 
(Table: summaries: Size: 106496 bytes) 


From 


From: no reply@snapchat.com Team Snapchat 


To 


To: pof EE snd@hotmail.com pol andO hotmail.com (owner) 
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2021-02-12 kl 17:37:58 skickas ett meddelande frán Team Snapchat till 
on and@hotmail.com om att någon loggat in pa hans konto ”pelle.strand” från en Iphone 
12: 


» Email 


Account: pon MM rand@hotmail.com 

Snippet: [https://storage.googleapis.com/email-media/Hijack_Email_Header.png] Har precis loggat in! Hej pelle.strand, det ser ut 
som om nágon loggade in pá ditt konto fran en enhet som heter "¡Phone 12" den den 12 februari 2021 kl. 16:27:56 
UTC. Inloggningen skedde nágonstans i nárheten av Gothenburg, Sverige (IP = 83.187.176.104). Om detta var du kan 
du bortse från detta mejl, du behöver inte göra något ytterligare. Om det inte var du bör du ändra ditt lösenord i 
Snapchat-appen eller på v 

Folder: 194B5D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Inloggning till Snapchat pa den 12 februari 2021 

Timestamp: 2021-02-12 17:37:58(UTC- 1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index : Ox808FA 
(Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
0x6FA57 (Table: addresses; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-AO8E-F68D57BFD01E.mbox/Messages/CFF986DF-6EC9-4ACD-84E2- 
FACCD907F6FB.emlx : 0x0 (Size: 13694 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
0x17F96 (Table: mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index : 0xB625 
(Table: summaries; Size: 106496 bytes) 


From 


From: no reply@snapchat.com Team Snapchat 


To 


To: Pon — hotmail.com por -© hotmail.com (owner) 
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S Polisen Telefongenomgäng se HEMLIG 


Upprättad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-12 kl 18:30:45 skickas ett meddelande fran Team Snapchats support-mail om en 
inloggningsfräga som pelle.strand ställt: 


» Email 


Account: pon end@hotmaitcom 


Snippet: ##- Please type your reply above this line -## pelle.strand Feb 12, 2021, 5:30 PM UTC Jag har inte mitt nummer eller 
telefon kvar sá försö in på en ny telefon men lyckas ej. Glömt av vilken e post som år kopplad till detta snap 
konto om det år pon andO hotmail.com <maitto:p "` nd otra com Eller 
por — 92 @Hotmail.com <mailto: por III Hur kan jag gå tillväga ? Har ju 
anvåndarnamn och lósenord till kontot men kommer åndå ej i 

Folder: 194B5D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Snapchat Support Ticket ID: 139278284 

Timestamp: 2021-02-12 18:30:45(UTC- 1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index : 0x809A6 
(Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
Ox6FA2D (Table: addresses; Size: 469712 bytes) 


373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-A08E-F68D57BFD01E.mbox/Messages/724EF572-6814-4392- 
A266-9220E49C36E7.emlx : 0x0 (Size: 12181 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
0x17F96 (Table: mailboxes: Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index : OxB81E 
(Table: summaries: Size: 106496 bytes) 


From 


From: support@snapchat.zendesk.com Team Snapchat 


To 
To: m na @hot mail.com pelle.strand (owner) 


BCC 


Attachments 


Body [»1) s Text 


##- Please type your reply above this line -## 


pelle.strand 


Jag har inte mitt nummer eller telefon kvar sá fórsóker logga in pá en ny telefon men lyckas ej. 
Glómt av vilken e post som ar kopplad till detta snap konto om det ar po and@hotmail.com 


Eller vo 0 2 @hotmail.com. 


Hur kan jag ga tillvaga ? 
Har ju anvándarnamn och lósenord till kontot men kommer ándá ej in. 


Email header 
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Telefongenomgång 33 


Upprättad av Datum Diarienr Saknr Version 


Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-12 kl 20:27:25 skickas ett meddelande från Team Snapchat till 
on| nd@hotmail.com om att nágon loggat in pa hans konto "slajfarn" fran en enhet som 


heter "iPhone X”: 


» Email 


Account: ro MM nd @hotmail.com 


Snippet: [https://storage.googleapis.com/email-media/Hijack Email Header.png] Har precis loggat in! Hej slajfarn, det ser ut 
som om någon loggade in på ditt konto från en enhet som heter "iPhone X" den den 12 februari 2021 kl. 19:27:22 UTC. 
Inloggningen skedde någonstans i nårheten av Gothenburg, Sverige (IP = 90.235.21.247). Om detta var du kan du 
bortse från detta mejl, du behöver inte göra något ytterligare. Om det inte var du bör du åndra ditt lösenord i 
Snapchat-appen eller på vår sup 

Folder: 194B5D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Inloggning till Snapchat pa den 12 februari 2021 

Timestamp: 2021-02-12 20:27:25(UTC- 1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index : Ox826FE 
(Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345_files_full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
0x6FA57 (Table: addresses; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-AOSE-F68D57BFD01E.mbox/Messages/572D8F 16-1212-40B0- 
B2D5-83EFF31C53E0.emlx : 0x0 (Size: 13518 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
0x17F96 (Table: mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index : 0x1219A 
(Table: summaries; Size: 106496 bytes) 


From 


From: no reply@snapchat.com Team Snapchat 


To 


To: DÉI ` nd @hotmail.com pontuslindstrand@hotmail.com (owner) 
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Telefongenomgáng 34 


Uppráttad av Datum Diarienr Saknr Version 


Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-12 kl 20:33:27 skickas ett meddelande frán Facebook om en inloggningskod fór att logga in 
pá Facebook: 


» Email 


Account: por -© otmicom 


Snippet: Hej Pontus! Du kan ange den här inloggningskoden för att logga in på Facebook: 764196 Meddela oss om du inte 
försökte logga in. [https://static.xx.fbcdn.net/rsrc.php/v3/yP/r/nbIMrq 1jYuK.png] Facebook Hej Pontus! Du kan ange 
den här inloggningskoden för att logga in på Facebook: 764196 Meddela oss<https://www.facebook.com/login/ 
recover/cancel/?n=764196&id=1517356926&i=iphone_native&cpl=1> om du inte försökte logga in. Det har 
meddelandet har skickats til 

Folder: 194B5D3E-0728-4BB3-A6FD-57D29FEFF145/5 

Subject: 764196 år din kod för att logga in pa Facebook 

Timestamp: 2021-02-12 20:33:27(UTC+1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207£a93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index : 0x82490 
(Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
Ox6F3CF (Table: addresses; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/Deleted Items.mbox/Messages/CFA577D1-C676-446C-AED1-E0073A4D1D67.emlx : 0x0 (Size: 

14248 bytes) 

373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
0x180D7 (Table: mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index : Ox14C36 
(Table: summaries: Size: 106496 bytes) 


From 


From: security@facebookmail.com Facebook 


To 


To: poll nd@hotmail.com Pontus Biscaard (owner) 
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$ Polisen EE sef HEMLIG 


Uppråttad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-12 kl 20:36:03 skickas ett meddelande från Team Snapchat om att någon loggat in på 
”pelle.strand” från en enhet som heter "iPhone X”: 


» Email 


Account: ro ` and @hotmail.com 


Snippet: [https://storage.googleapis.com/email-media/Hijack Email Header.png] Har precis loggat in! Hej pelle.strand, det ser ut 
som om någon loggade in på ditt konto från en enhet som heter "¡Phone X" den den 12 februari 2021 kl. 19:26:01 UTC. 
Inloggningen skedde nágonstans i nárheten av Gothenburg, Sverige (IP = 90.235.21.247). Om detta var du kan du 
bortse fran detta mejl, du behóver inte gora nágot ytterligare. Om det inte var du bor du ándra ditt lósenord i 
Snapchat-appen eller pá vár 

Folder: 19485D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Inloggning till Snapchat pa den 12 februari 2021 

Timestamp: 2021-02-12 20:36:03(UTC- 1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index : 0x825A8 
(Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
0x6FA57 (Table: addresses; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-AO8E-F68D57BFDO1E.mbox/Messages/6BD5F594-38D0-4FE7-8689- 
A9FE777B23AB.emlx : 0x0 (Size: 13715 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
Ox17F96 (Table: mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index : Ox14A3C 
(Table: summaries; Size: 106496 bytes) 


From 
From: no reply@snapchat.com Team Snapchat 
To 


To: T 5 2nd@hotmail.com po =- © hotmail.com (owner) 
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Uppráttad av 


Henrik Norlin, Utredare Grova Brott 


E Dokument 
S Polisen Telefongenomgáng 
Datum Diarienr 
2023-09-13 5000-K189802- 


21 


sel HEMLIG 
36 ME 
01.00 


2021-02-13 kl 11:45:52 skickas ett Digitalt kvitto från elgiganten.se avseende inbetalning för köp av 
tre mobiltelefoner med abonnemang samt kontantkort i butiken Elgiganten Båckebol, Hisingsbacka: 


» Email 


Account: 


Snippet: 


Folder: 


Subject: 


Timestamp: 


Priority: 
Source: 
Status: 
Extraction: 


Source file: 


From 


" nd @hotmail.com 


Basta kund, Tack for att du har valt att 
handla hos Elgiganten Backebol. Enligt 
överenskommelse skickar vi kvittot med e- 
post, sa att du enkelt kan spara det. Har du 
fragor om produkten eller andra 
funderingar, kan du kontakta var 
kundtjánst. Om du har kópt en forsakring 
med din produkt kan du hitta villkoren fór 
din köpta produktförsåkring har<https:// 
www.elgiganten.se/cms/forsakring/ 
forsakringsvillkor>. Vánliga hálsningar 
Elgiganten www.elgiganten.se<http:// 
www.elgiganten.se/> 
194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/7 

Digitalt kvitto på ditt inköp 02/13/2021 hos 
Elgiganten Båckebol 

2021-02-13 11:45:52(UTC+1) 


Normal 
Emails 
Read 


Legacy 
373fd2e35eced361b8ff2ca4a54ab4207f 
293345 files full.zip/private/var/ 
mobile/Library/Mail/Envelope Index : 
0x82C60 (Table: messages; Size: 573440 
bytes) 
373fd2e35eced361b8ff2ca4a54ab4207f 
293345 files full.zip/private/var/ 
mobile/Library/Mail/Protected Index- 
wal : Ox6F23E (Table: addresses; Size: 
469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207f 
293345 files full.zip/private/var/ 


From: donotreply@elgiganten.se Elgiganten 


To 


To: NS O hotmail.com 2 ES 


> 


Inbetalning på kundorder 


Elgiganten Båckebol 
Transportgatan 21 
422 04 HISINGEBACKA 


02/13/2021 11:45 AM 
Kvitto. 100044600000961 


Kundnr.: 1632044414 
Namn: Pantus Lindstrand 
E-post: D andehodnal com 
TLF: H44709394741 
INBETALNING PA KUNDORDER 2230734334 
10: 1.00 x 234556 iPhone 12 Pra Max - SG smar 
; 1.00 x AMODIMODTIICTZ Dgiganteri AppleC 
: 1.00 x PRISREDTELE PRISREDUCERING TEL 
" 1 00 x TEMOHOHG24 I ELIA MOBIL DEG 24 
: 1.00 x TEIP12PM1230B TEUA MOBIL OBGB 
. 1.00 x TEDELB1000D TELIA DELBETALNING 
: 1.00 x 268577 Samsung Galaxy A12 amartp 
BA: 1.00 x 268576 Samsung Galaxy A17 smartp 
59: 1.00 x MODMOD12 Trygghetsavtsl - Mobil - 
190: 1.00 x MODMOB12 Trygghetsavtal - Mobil 
110; 1,00 x HALEBOPS TARI Halebop Kontantk 
120: 1.00 x HALEBOPSTART Halcbap Kantantk 
Total pá order: 7,801.30 


SUBTOTAL INDETALNING PA KUNDORDER 
AVRUNDNING 


Sum 


Kontant 
Kontant tilbaka 


2230134824 
DAG 


elgiganten.se 


Kassa: SEQ00446 


£801.30 


7,801.30 
-0.30 


7,801.00 


8,000.00 
199.00 
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$ Polisen a sef HEMLIG 


Uppråttad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-13 kl 12:45:37 skickas ett digitalt kvitto från elgiganten.se avseende köp av mobiltelefon 
iPhone 12 Pro Max dår detaljer om telefonen samt abonnemang för 24 månader ingår: 


por CREE [m] er 


Account: 


Snippet: Båsta kund, Tack för att du har valt att Pontus Lindstrand Kvitto 
handla hos Elgiganten Båckebol. Enligt Fakturanummer 9052783580 
överenskommelse skickar vi kvittot med e- Datum 13.02.2021 
post, så att du enkelt kan spara det. Har du Butik 2037 Elgiganten Båckebol 
peer pa preteen pna Organisationsnummer SE556471447401 
funderingar, kan du kontakta vár 
kundtjanst. Om du har kópt en forsakring Valuta SEK 
med din produkt kan du hitta villkoren fór 
din köpta produktförsåkring har<https:// Direct Delivery Store 
www.elgiganten.se/cms/forsakring/ 
forsakringsvillkor>. Vanliga halsningar Artikel Beskrivning Pris Rabatt Antal Total Moms 
Elgiganten www.elgiganten.se chttp:// 234556 iPhone 12 Pro Max - 5G smartphone 128GB 13 790,00 0,00 I 13 790,00 25,00% 
www.elgiganten.se/> (pacific blue) 
Folder: 19485D3E-0728-4BB3- S/N: 
A6FD-57D29FEFF145/7 000351406665912154 
Subject: Digitalt kvitto på ditt inköp 02/13/2021 hos Månadskostnad för detta köp: 1005 kr. då 
Elgiganten Båckebol ingår fria samtalsms och mms samt 
Timestamp: 2021-02-13 11:45:52(UTC+1) obegränsad surfi 24 månader. 
Priority: Nora AMODMOBITIE12  Hgiganten AppleCare stöld 12 man 3 399,00 0,00 1 3 399,00 0,00% 
Source: Emails PRISREDTELE PRISREDUCERING TELECOM -14 636,00 0,00 1 -14 636,00 25,0096 
Status: Read TEMOBOBG24 TELIA MOBILOBG 24M 0,10 0,00 1 0,10 25,00% 
Extraction: Legacy T pao - 
TEIPT2PM1280B — IELIA MOBILOBGB IPT2PM 128GB 0.10 0,00 1 0,10 25,00% 
Source file: 373fd2e35eced361b8ff2ca4a54ab4207f 
293345 files full.zip/private/var/ TEDELB1 0000 TELIA DELBETALNING 10000KR 0.10 0,00 1 0,10 25,00% 
mobile/Library/Mail/Envelope Index : 
0x82C60 (Table: messages; Size: 573440 HALEBOPSTART Halebop Kontantkort startpaket 45,00 0,00 1 45,00 25,00% 
bytes) HALEBOPSTART ` Halebop Kontantkort startpaket 45.00 0,00 1 45,00 25,0096 
373fd2e35eced361b8ff2ca4a54ab4207f 
893345 files full.zip/private/var/ Pris Betygsätt Enhet Grundlag Fa 
wärte ee void Total ex. moms -11708,80 SEK 1,00 -11 708,80 
o e E (estes See Total ex. moms 0,08 SEK 3,00 0,24 
z ytes) : Total ex. moms 36,00 SEK 2,00 72,00 
e DUET A Total ex. moms 3399,00 SEK 1,00 3 399,00 
293345 files full.zip/private/var/ 
Total ex. moms 11032,00 SEK 1,00 11 032,00 
Moms 25,00 % -755,70 -151,14 
Hom Moms % 3 399,00 0,00 
From: donotreply@elgiganten.se Elgiganten Total ink. moms SEK 2 643,30 
Betalt belopp 7 801,30 
To Aterstáende belopp 0,00 
Betalningsstatus Fullt betald 


To: AE - LI 


ELGIGANTEN ) 
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Uppráttad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-13 kl 13:06:39 skickas en sákerhetskod Microsoft-teamet fór inloggning pá Microsoftkontot 
Pe*****@hotmail.com: 


» Email 


Account: AE WEE 


Snippet: Microsoft-konto Sakerhetskod Anvand foljande sakerhetskod for Microsoft-kontot 
Pe*****@hotmail.com<mailto:Pe*****@hotmail.com>. Sakerhetskod: 4072 Om du inte begärde den hår 
koden kan du ignorera det har e-postmeddelandet. Det ár mójligt att en annan anvándare skrev din e- 
postadress av misstag. Tack! Microsoft-kontoteamet 


Folder: 194B5D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Sakerhetskod for Microsoft-konto 

Timestamp: 2021-02-13 13:06:39(UTC « 1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope 
Index : 0x82A5A (Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected 
Index-wal : Ox6F1D6 (Table: addresses; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/ 
Mail/194B5D3E-0728-4BB3-A6FD-57D29FEFF145/70FB9178-576E-4CAA-AO8E-F68D57BFDO1E.mbox/ 
Messages/DFED054D-8A3B-400A-BD7B-B0D84E477DE2.emlx : 0x0 (Size: 15464 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope 
Index-wal : 0x17F96 (Table: mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected 
Index : 0x151E7 (Table: summaries: Size: 106496 bytes) 


From 


From: account-security-noreply@accountprotection.microsoft.com Microsoft-kontoteamet 


To 


To: pod @hotmail.com AR ndO hotmail.com (owner) 
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Telefongenomgang 39 


Uppráttad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-13 kl 13:33:45 skickas meddelande från Team Snapchat om att någon loggat in pa "pelle.strand"'s 
konto fran en enhet som heter "iPhone 12 Pro Max”: 


» Email 


Account: D «oo 

Snippet: [https://storage.googleapis.com/email-media/Hijack Email Header.png] Har precis loggat in! Hej pelle.strand, det ser ut 
som om nágon loggade in pá ditt konto frán en enhet som heter "iPhone 12 Pro Max" den den 13 februari 2021 kl. 
12:33:43 UTC. Inloggningen skedde nágonstans i narheten av Gothenburg, Sverige (IP = 90.235.4.167). Om detta var du 
kan du bortse fran detta mejl, du behöver inte göra något ytterligare. Om detta inte var du bör du ändra ditt lösenord i 
Snapchat-appen el 

Folder: 194B5D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Inloggning till Snapchat pa den 13 februari 2021 

Timestamp: 2021-02-13 13:33:45(UTC+1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index : 0x829AE 
(Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
Ox6F1A0 (Table: addresses, summaries; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-A08E-F68D57BFD01E.mbox/Messages/3F5A1E33-A16B-4CCE-818E- 
F3242D2662AC.emlx : 0x0 (Size: 13166 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345_files_full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
0x17F96 (Table: mailboxes; Size: 309032 bytes) 


From 


From: no reply@snapchat.com Team Snapchat 


To 


To: "ARE m ` EE (owner) 


Telefongenomgång 2021-BG24357-10 , 2023-11-01 14:47 diarienr: 5000-K189802-21 161 


ng Dokument Sida 
S Polisen Telefongenomgáng 40 


Uppráttad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


2021-02-13 kl 13:54:42 skickas ett meddelande frán Instagram om en ny inloggning pá Instagram pá Apple 
iPhone: 


» Email 


Account: poll: @hotmailicom 

Snippet: [https://static.xx.fbcdn.net/rsrc.php/v3/yb/r/QTa-gpOyYBa.png] chttps://www.instagram.com/ n/mainfeed? 
utm campaignzig, suspicious login&utm mediumzemail&target user id=217392203&ndid=5bb36f80022 
e4G24bc2ce7ef644bG5bb37419625b6G9e4» [https://scontent.cdninstagram.com/v/t51.2885-19/ 
5150x150/26157575 144589672917481 297855711394660352 n.jpg] <https://www.instagram.com/_n/ 
user? 
utm campaignczig suspicious login&utm mediumzemail&target user id=217392203&username=pontusli 
ndstrand&ndid-5bb36f80022e4G24 

Folder: 19485D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Ny inloggning pá Instagram fran Instagram p3 Apple iPhone 

Timestamp: 2021-02-13 13:54:42(UTC « 1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope 
Index : 0x82903 (Table: messages; Size: 573440 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected 
Index-wal : 0x6F406 (Table: addresses, summaries; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/ 
Mail/194B5D3E-0728-48B3-A6FD-57D29FEFF145/70FB9178-576E-ACAA-AO8E-F68D57BFDO1E.mbox/ 
Messages/DF6778E1-05F9-4BE3-A463-47B4298B0B9D.emlx : 0x0 (Size: 18551 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope 
Index-wal : 0x17F96 (Table: mailboxes; Size: 309032 bytes) 


From 


From: security@mail.instagram.com Instagram 


To 


To: pon -nc@hotmail.com m nd@hotmaitcom (owner) 


Vi har upptackt en ny inloggning 
pontuslindstrand 


Vi har upptackt en inlo 


Apple iPhone - Instagram - Gothenburg, 
Sweden 


February 13 at 4:54 AM (PDT 
Om det var du Kan du ignorera det har 


e-postmeddelandet. Om det inte var du kan du 


sakra ditt konto har 


Las mer om hur du skyddar ditt konto. 
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2021-02-16 kl 00:28:02 skickas meddelande fran TV4 Play om att administrera lósenord på kontot: 


» Email 


Account: dC hotmail.com 


Snippet: [TV4 Play logotype] Glömt ditt lösenord? Ingen fara, vi löser det. Klicka pá knappen nedan för att välja ett nytt lösenord. 
Har du ett konto pá C More sá gäller ditt nya lösenord även dar. Trevligt tittande TV4 Play Välj nytt lósenord«https:// 
www.tv4play.se/byt- 
losenord/478606A00B0F81800981086807E551016FA5BAA4A61F83BF0D9203122C5D700450D2CD100A3A3E94769F89D 
8559F176A30E6EC08C9664B30> © 2019 TV4 

Folder: 194B5D3E-0728-4BB3-A6FD-57D29FEFF145/7 


Subject: Valj ditt nya lósenord 
Timestamp: 2021-02-16 00:28:02(UTC « 1) 
Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 


Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
0x4A571 (Table: messages, mailboxes; Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
Ox6F2C2 (Table: addresses, summaries; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207£a93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-A08E-F68D57BFD01E.mbox/Messages/A8D201EC- 
D067-4B93-8EF4-19C53CD33CCF.emlx : 0x0 (Size: 12923 bytes) 


From 


From: do-not-reply@tv4play.se TV4 Play 


To 


To: DÉI ` nd @hotmail.com m endOhotmail.com (owner) 
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2021-02-18 kl 00:35:11 skickas meddelande från Elgiganten med kvitto på bestållning av två mobiltelefoner 
av mårket Samsung: 


» Email 


Account: poll nd @hotmail.com 


Snippet: Hej Pontus Lindstrand! Bifogat finner du din kvitto for din bestállning med ordernummer 2230134834, Har du nágra 
frágor gállande din kvitto sá ar du valkommen att kontakta oss. Du hittar vára kontaktuppgifter pá www.elgiganten.se/ 
Kontakt. For att vi ska kunna hjalpa dig pá ett sá bra sátt som mójligt ber vi dig att uppge ditt kvittonummer vid kontakt 
med oss. Med vánliga hálsningar Elgiganten AB 

Folder: 194B5D3E-0728-4BB3-A6FD-57D29FEFF145/7 

Subject: Kvitto 9053017637 

Timestamp: 2021-02-18 00:35:11(UTC+1) 

Priority: Normal 

Source: Emails 

Status: Read 

Extraction: Legacy 

Source file: 373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Envelope Index-wal : 
Ox4A35C (Table: messages, mailboxes: Size: 309032 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index-wal : 
0x6F358 (Table: addresses; Size: 469712 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-A08E-F68D57BFD01E.mbox/Messages/6EEE3F5E- 
CDF3-476D-9C7C-6CFBDB308D5F.emlx : 0x0 (Size: 70338 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/194B5D3E-0728-4BB3- 
A6FD-57D29FEFF145/70FB9178-576E-4CAA-A08E-F68D57BFD01E.mbox/Messages/6EEE3F5E- 
CDF3-476D-9C7C-6CFBDB308D5F.emlx/Kvitto 9053017637.PDF : (Size: 45743 bytes) 
373fd2e35eced361b8ff2ca4a54ab4207fa93345 files full.zip/private/var/mobile/Library/Mail/Protected Index : 
Ox15E60 (Table: summaries, Size: 106496 bytes) 


From 


From: donotreply@elgiganten.se 8 donotreplyGelgiganten.se 


To 


To: pon ` 56 hotmail.com pontuslindstrand@hotmail.com (owner) 


Av kvittot kan man utlasa att det avser kvitto pa tva Samsungtelefoner som kóptes och betalades 2021-02- 
13 kl 11:46:00: 
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El 


DUE: 
D 


Pontus Lindstrand Kvitto 


Fakturanummer 9053017637 
Datum 18.02.2021 
Butik 2037 Elgiganten Backebol 
Organisationsnummer SE55647 1447401 
Valuta SEK 
Pickup | 
Artikel Beskrivning Pris Rabatt Antal Total Moms 
268577 Samsung Galaxy A12 smartphone 4/64GB 1 990.00 0,00 1 1 990,00 25,00% 
(svart) 
S/N: 
R58NC4AZNAH 
Imei: 350396266397452 
Ime i2: 359082626397454 
268576 Samsung Galaxy A12 smartphone 4/64GB 1 990,00 0,00 I 1990,00 25,0096 
(vit) 
S/N: 
R58NCAKSNSD 
Imei:350396266783065 
imci2: 359082626783067 
Pris Betygsátt Enhet Grundlag Summa 
Total ex. moms 1592,00 SEK 2,00 3 184,00 
Moms 25,00 Yo 3 980,00 796,00 
Total ink. moms SEK 3 980,00 
Betalt belopp 7 801,30 
Aterstaende belopp 0,00 
Betalningsstatus Fullt betald 
Betalningsinformation Nójda kunder ár det viktigaste fór oss pa Elgiganten! 
Hos oss far du mójligheten att prova det du köpt i 30 
Datum 13.02.2021 dagar. Fór klubbmedlemmar gáller 50 dagar. 
Tid 11:46:00 UNDANTAG: abonnemang, tjánster, kók, presentkort 
Betalningsmetod CASH och pá kópet erbjudanden. Mobiltelefon, film, spel, 
Betalt belopp SEK 7801,30 programvara och hygienartiklar återlämnas i obruten 
Referens 329070aa10a74b0888c89dea63 förpackning. Produkten returneras komplett och i 
235ce6-100044600000981 oförändrat skick. Fullständiga villkor för öppet köp i en 
Elgiganten Phonehouse butik samt övriga 
Godkänd, behåll ditt kvitto kundgarantier se elgiganten.se/kundgarantier. 


KVITTOT ÄR EN VÄRDEHANDLING och skall 
uppvisas vid retur, garanti- och reklamationsärenden. 


Bankkonto BG 310-6887 
IBAN SE4291900000091953639099 
SWIFT DNBASESX 
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3.2.16 Images 


Under denna rubrik finns 19736 poster. 79 av dessa bilder har extraherats och presenteras i bilaga 2 till 
denna rapport. 


Följande bilder kan omnåmnas som av betydelse för utredningen: 


Bild 1. 2021-02-13 kl 18:54:32 skapas en bild visande en hotellbokning i Booking.com med incheckning på 
Clarion Hotel Stockholm, 13 feb 20201 och utcheckning 15 feb 2021. 


Bild 3. 2021-02-14 kl 16:37:57 skapades en bild på Mahad Ali. 


Bild 11. 2021-02-15 kl 20:40:31 skapades en bild som visar vad som förefaller vara interiören i en bil dar 
låten ”Murda Gang” spelas på Spotify och dår texten ”Lyssna på denna mahad” år pålagt. 


Bild 12. 2021-02-16 kl 00:35:20 skapades en bild som visar en poserande Kim Nyman. 


Bild 13. 2021-02-16 kl 00:52:55 skapades en bild som förefaller vara en skårmdump på en facebook-profil 
tillhörande Kim Nymans vån Rabi Mousa. 


Bild 14. 2021-02-16 kl 00:52:58 skapades en bild som visar en poserande Kim Nyman. 
Bild 16. 2021-02-16 kl 11:55:46 skapades en bild som förefaller vara en selfie på Mahad Ali. 


Bild 22. 2021-02-16 kl 23:33:58 skapades en bild med ett foto taget i en bil och med texten ”Stockholm” 
tillagt. 


Bild 25. 2021-02-18 kl 16:34:11 skapades en bild som förefaller vara en skårmdump från hemsidan 
flashback.org med en tråd som nåmner Kim, född 93, från Götebrog. 


Bild 29. 2021-02-20 kl 22:58:39 skapades en bild som visar svenska sedlar i kontanter samt vad som 
förefaller vara ett pistolliknande föremål. 


Bild 31. 2021-02-21 kl 17:47:20 skapades en bild som år ett foto av Mahad Alis pass. 


Bild 32. 2021-02-23 kl 03:16:27 skapas en bild av vad som förefaller vara en skårmdump på en prisuppgift 
avseende hyrbil på europcar.com mellan 23 — 28 februari 2021. 


Bild 33. 2021-02-23 kl 03:35:02 skapas en bild av vad som förefaller vara en skårmdump på en prisuppgift 
avseende hyrbil på europcar.com mellan 23 — 24 februari 2021. 


Bild 37. 2021-02-23 kl 19:08:51 skapades en bild som år ett foto av Ferdi Kücükgöls pass. 
Bild 38 - 41. 2021-02-23 kl 20:53:51 skapades 4 bilder som år certifikat från PT provtagning, Birger 


Jarlsgatan 39 i Stockholm för negativa Covid-test betråffande Muhammed Ali, Stefan Aleksic, Mahad Ali 
samt Ferdi Kücükgöl. (Samtliga stoppades tillsammans vid gränsen till Norge (Tóckfors) 2021-02-25). 


Telefongenomgång 2021-BG24357-10 , 2023-11-01 14:47 diarienr: 5000-K189802-21 166 


$ Polisen a sef HEMLIG 


Uppråttad av Datum Diarienr Saknr Version 
Henrik Norlin, Utredare Grova Brott 2023-09-13 5000-K189802-21 01.00 


Bild 47. 2021-02-24 kl 01:49:41 skapades en bild som förefaller vara en skårmdump från en chatt-app, 
ursprungligen skårmdumpad vid tidpunkten 18:10 okånt datum. Bilden visar en pistol med magasin samt 
texten "(QKRIGET | GOTEBORG”. 


Bild 49. 2021-02-24 kl 01:49:42 skapades en bild som förefaller vara en skårmdump från en chatt-app, 
ursprungligen skårmdumpad vid tidpunkten 18:12 okånt datum. Bilden visar texten ”M-Falangen i 
Tynnered leder med 6-2 i kroppar mot G-falangen i Frölunda. Sa tyst nu barn :)”. 


Bild 50 - 52. 2021-02-24 kl 02:39:57 skapades 3 bilder som förefaller vara selfies på Mahad Ali. 


Bild 67. 2021-02-25 kl 03:16:10 skapades en bild som år ett foto på Mahad Ali som sitter i en bil med en 
cigarett i handen. 


Bild 78. 2021-02-25 kl 11:26:59 skapades en bild som förefaller vara en skårmdump av en bokning på 
Booking.com med information om att bokningsbekráftelse skickats till mahad a996Qhotmail.com. 
Bekråftelsen visar bekråftelsenummer och PIN-kod. 


3.2.17 Videos 


Under denna rubrik finns 1704 poster. 19 st av dessa redovisas i bilaga 3 med bilder ur videoklippet. En 


kort beskrivning av videofilmer som kan ha intresse för utredningen redovisas hår: 


Video 1. 2021-02-14 kl 00:21:00 skapas en video dår en kvinna pratar kort och filmar sig sjålv. I bakgrunden 


liggande på en sång ligger en mörkhyad man med en telefon i handen. 


Video 3. 2021-02-14 kl 18:10:53 skapas en video dår en man sittande i en bil håller i kameran. I baksåtet 


bakom mannen som filmar sitter Mahad Ali. 


Video 4. 2021-02-14 kl 18:30:34 skapas en video dår samma man som i video 3 filmar sig sjålv och dår 


Mahad Ali syns i bakgrunden. De förefaller befinna sig på en restaurang. 


Video 6. 2021-02-16 kl 03:06:32 skapas en video dår Mahad Ali först filmar sin vånstra arm dår han bår en 


klocka som förefaller vara av mårket Rolex. Dårefter filmar han sitt eget ansikte. 


Video 9. 2021-02-22 kl 03:29:49 skapas en video på 2 sek dår Mahad Ali ligger i en sång bredvid en tjej. 
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Video 10. 2021-02-24 kl 01:17:13 skapas en video som filmats inne i en bil. Personen som filmar sitter i 


framsátet. | baksátet syns Mahad Ali. 


Video 11. 2021-02-24 kl 01:17:14 skapas en video pá 4 sek dar Mahad Ali syns sitta med en mobiltelefon i 


handen. 


Video 12. 2021-02-24 kl 02:22:45 skapas en video dar Mahad Ali syns sta i en lágenhet. Det ár inte han som 


filmar. 


Video 18. 2021-02-25 kl 10:01:37 skapas en video på 9 sek dar en person filmar inne i en bil, pratar in i 
kameran och säger: "Sá att ni vet i alla fall... vi år exakt vid gränsen nu och dom tog alla våra pass och jag 
tror att dom kommer kolla igenom bilen och vi har en atrapp i bilen sá att ni vet ifall att vi torskar...”. Det 
syns 4 personer i bilen. 

Video 19. 2021-02-25 kl 10:01:39 skapas en video pá 9 sek inne i en bil dar personen som filmar har 


munskydd. Man kan se att bilen ar en Volvo och att det finns norska polisbilar utanfor bilen. 


// krinsp H Norlin 
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C 
£7 Cellebrite 


Extraction Report - Apple iOS Full File system pt sm 
Summary 
Cellebrite Physical Analyzer version 7.64.0.38 
Report creation time 2023-11-01 14:09:03 +01:00 
Time zone settings (UTC) (UTC+01:00) Stockholm (Europe) 
Examiner name Jonathan Brånfeldt 


Source Extraction 


Legacy 
Selected manufacturer Apple 
Selected device name APPLE IOS FULL FILE SYSTEM 
Time zone settings (ID) _Europe/Stockholm 


Plugins 


1 PreProject Cellebrite 2.0 
2 UFED Logical Report Reader Cellebrite 2.0 
Reads the report generated by the UFED 
3 Physical Analyzer Report Reader Cellebrite 2.0 
Reads report generated by the Physical Analyzer 
4 ProjectProcessorFinisher Cellebrite 2.0 
5 PostProject Cellebrite 2.0 
Contents 
= Call Log 65 65 
a Contacts 9 9 
D Device Connectivity 4 4 
9 Locations 7 7 
KA Notes 1 1 
a Searched Items 11 11 
Ae User Accounts 13 13 
Q Web History 280 280 
k Data Files 1 1 
al Documents 1 1 
D Tags 391 391 
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Call Log (65) 


From: 
100046341096779 
Patric Malko 


To: 
1517356926 
Pontus Biscaard 


Direction: 
Incoming 


2020-02-17 
11:29:33(UTC+1) 


00:00:00 


Missed 


Source: Facebook Messenger 
Account: 1517356926 


From: 


+467 ` 49 


Valentina * 


Direction: 
Incoming 


2021-02-13 
00:34:18(UTC+1) 


00:08:41 


Answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Yes 


Source: FaceTime 


Yes 


From: 
“467 — Lv 
Valentina * 


Direction: 
Incoming 


2021-02-13 
00:44:50(UTC+1) 


00:49:08 


Answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Yes 


Source: Face Time 


Yes 


To: 
+467 — 449 
Valentina * 


Direction: 
Outgoing 


2021-02-13 
01:35:54(UTC+1) 


00:01:20 


Answered 


(Sweden)* 


Yes 


Source: FaceTime 


Yes 


From: 
+46 7H 4 49 
Valentina * 


Direction: 
Incoming 


2021-02-13 
01:39:43(UTC+1) 


00:26:52 


Answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Yes 


Source: FaceTime 


Yes 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-15 
13:27:21(UTC+1) 


00:00:00 


Not 
answered 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
252615245172@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-15 
13:27:52(UTC+1) 


00:00:00 


Not 
answered 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


From: 
“467 449 
Valentina “ 


Direction: 
Incoming 


2021-02-16 
00:31:12(UTC+1) 


00:21:24 


Answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Yes 


Source: FaceTime 


Yes 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-16 
14:01:58(UTC+1) 


00:00:00 


Not 
answered 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


10 


From: 
46790223662@s.whats 
app.net 

Mahad 

T . 


0: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-16 
14:02:12(UTC+1) 


00:06:51 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


11 


From: 
252615192542@s.what 
Se 


0: 
46790223662@s.whats 
app.net 
Mahad 
Direction: 

Incoming 


2021-02-17 
16:52:39(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
E 
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From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-17 
17:07:29(UTC+1) 


UU:UU:UU 


NOT 
answered 


Source: WhatsApp 
Account: 


HEMLIG” 
46790223662@s.whattapp.Ad- 
t 


13 


From: 


467] 74 @s.whats 
app.net 


les secrets de la vie 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-18 
12:51:56(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


14 


15 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
410799085 74 @s.whats 
app.net 

les secrets de la vie 


Direction: 
Outgoing 
From: 


En ` 45 whats 
app.net 
les secrets de la vie 


To: 

46790223662 (9)s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-18 
14:05:14(UTC+1) 


2021-02-18 
14:13:37(UTC+1) 


00:00:00 


00:02:15 


Rejected 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


16 


To: 
0708922241 
Mamma* 


Direction: 
Outgoing 


2021-02-18 
15:02:21(UTC+1) 


00:00:54 


Answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Yes 


Source: FaceTime 


Yes 


17 


From: 
40720905 74 @s.whats 
app.net 

les secrets de la vie 


O: 
46790223662@s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-18 
16:55:22(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


18 


From: 
46700 9 @s. whats 
app.net 

Valentina 


0: 
46790223662@s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-19 
02:59:41(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


19 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 

Hen ` 9 @s.whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-19 
02:59:45(UTC+1) 


00:00:14 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


20 


From: 


Hen ` ` 9 @s.whats 
app net 


Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-19 
03:00:01(UTC+1) 


00:08:56 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


21 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-19 
04:01:21(UTC+1) 


00:00:00 


Not 
answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


171 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
2 


From: 


EX ` ` / 4 @s.whats 
app.net 
les secrets de la vie 


0: 
46790223662 (9)s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-19 
13:32:25(UTC+1) 


UU:UU:58 


Answered 


Source: WhatsApp 
Account: 


HEMLIG” 
46790223662@s.whattapp.dd- 
t 


23 


From: 


402298449 @s.whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-19 
20:14:46(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


24 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 

407298449 @s.whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-19 
20:22:25(UTC+1) 


00:00:00 


Rejected 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


25 


26 


From: 


Hen ` ` 9 @s. whats 
app. net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


From: 


HEH ` 4 9 @s.whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-19 
20:27:33(UTC+1) 


2021-02-19 
23:00:07(UTC+1) 


00:03:38 


00:00:00 


Answered 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


Yes 


27 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
402" 0 @s. whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-19 
23:00:47(UTC+1) 


00:10:30 


Answered 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
is 


Yes 


28 


From: 


40 ` ` 9 @s.whats 
app.net 


Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-19 
23:11:24(UTC+1) 


00:13:42 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


29 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 

Hen ` ` 9 @s. whats 
app. net 

Valentina 


Direction: 
Outgoing 


2021-02-19 
23:58:52(UTC+1) 


00:19:28 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


30 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-20 
01:45:11(UTC+1) 


00:00:00 


Not 
answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


172 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
7 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
467MI 4 9 @s.whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-20 
02:13:43(UTC+1) 


UU:Z9:37 


Answered 


Source: WhatsApp 
Account: 


„HEMLIG“ 
46790223662@s.whatgapf.de- 
1 


32 


From: 


ACT 4 @s.whats 


app.net 
les secrets de la vie 


To: 

46790223662 (9)s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-20 
14:50:10(UTC+1) 


00:22:06 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


33 


34 


From: 
252615192542@s.what 
sapp.net 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


From: 
+467 073 
+46 7| 0 73* 


Direction: 
Incoming 


2021-02-20 
17:18:33(UTC+1) 


2021-02-21 
04:35:39(UTC+1) 


00:00:00 


05:26:20 


Missed 


Answered 


se 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Source: FaceTime 


Yes 


35 


From: 
46790223662@s.whats 
app.net 


To: 

Hen ` ` 9 @s. whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-21 
14:00:28(UTC+1) 


00:11:14 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


36 


From: 

Hen ` ` 9 @s.whats 
app net 

Valentina 


O: 
46790223662@s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-21 
19:26:46(UTC+1) 


00:05:12 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Yes 


37 


To: 
f5b5c135-837d-52b2- 
9e84-bfc8883d4ddd 
Huskooo 


Direction: 
Outgoing 


2021-02-21 
20:24:16(UTC+1) 


00:00:24 


Answered 


Source: Snapchat 


Yes 


38 


To: 
f5b5c135-837d-52b2- 
9e84-bfc8883d4ddd 
Huskooo 


Direction: 
Outgoing 


2021-02-21 
20:25:10(UTC+1) 


00:00:20 


Answered 


Source: Snapchat 


Yes 


39 


From: 
f5b5c135-837d-52b2- 
9e84-bfc8883d4ddd 
Huskooo 


Direction: 
Incoming 


2021-02-21 
20:41:07(UTC+1) 


00:00:09 


Answered 


Source: Snapchat 


Yes 


40 


From: 
8766d802-47ac-5833- 
8c9a-37c360670914 
Mike Milton 


Direction: 
Incoming 


2021-02-21 
20:58:44(UTC+1) 


00:00:10 


Answered 


Source: Snapchat 


Yes 


41 


From: 

En ` 4@s.whats 
app. net 

les secrets de la vie 


0: 
46790223662 (9)s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-22 
13:16:06(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
ib 
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From: 


HEH ` 4 0 @s.whats 
app.net 
Valentina 


0: 
46790223662 (9)s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-22 
16:16:52(UTC+1) 


UU:U7:5T 


Answered 


Source: WhatsApp 
Account: 
46790223662@s.what: 
t 


43 


To: 
0708922241 
Mamma* 


Direction: 
Outgoing 


2021-02-22 
17:29:48(UTC+1) 


00:00:03 


Answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Source: 


44 


From: 
0708922241 
Mamma* 


Direction: 
Incoming 


2021-02-22 
18:40:10(UTC+1) 


00:00:00 


Missed 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Source: 


45 


From: 


ACT 9 @s. whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-23 
12:36:50(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


46 


From: 


Hen ` ` 9 @s. whats 
app.net 


Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-23 
12:36:54(UTC+1) 


00:00:00 


Missed 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


47 


From: 


Hen -ES 4 @s. whats 
app.net 
les secrets de la vie 


To: 

46790223662 (9)s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-23 
12:40:00(UTC+1) 


00:18:23 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


48 


To: 
0708922241 
Mamma* 


Direction: 
Outgoing 


2021-02-23 
13:24:38(UTC+1) 


00:04:34 


Answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Source: 


Yes 


49 


From: 
46790223662(Qs.whats 


To: 

Hen ` ` 9 @s. whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-23 
14:31:35(UTC+1) 


00:02:56 


Answered 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


50 


From: 

Hen ` ` 9 @s. whats 
app.net 

Valentina 


0: 
46790223662 (9)s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-23 
16:59:25(UTC+1) 


00:01:26 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


51 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 

E ` 449 @s.whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-23 
17:26:28(UTC+1) 


00:00:00 


Rejected 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


52 


From: 


HEH ` 4 9 @s.whats 
app.net 
Valentina 


0: 
46790223662 (9)s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-23 
17:36:49(UTC+1) 


00:04:32 


Answered 


Yes 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 
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802-21 


From: 


4670 | @s.whats 
app.net 
mil 


0: 
46790223662 (9)s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-23 
18:01:51(UTC+1) 


UU:UU:4T 


0-K189 


Answered 


Source: WhatsApp 
Account: 
46790223662 (9)s.what 
t 


54 


From: 

46790223662 (9)s.whats 
app.net 

Mahad 


To: 

Hen ` Qs.whats 
app net 

+46 79 049 97 91 


Direction: 
Outgoing 


2021-02-23 
18:02:44(UTC+1) 


00:01:25 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


55 


From: 


ACT / @s.whats 
app.net 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


From: 


HEH ` 4 9 @s.whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-23 
19:44:54(UTC+1) 


2021-02-23 
20:33:06(UTC+1) 


00:01:45 


00:00:00 


Answered 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 

Hen ` ` 9 @s.whats 
app.net 

Valentina 


Direction: 
Outgoing 


2021-02-23 
20:34:38(UTC+1) 


00:06:43 


Answered 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


To: 
0708922241 
Mamma* 


Direction: 
Outgoing 


2021-02-24 
15:52:35(UTC+1) 


00:00:00 


Not 
answered 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Source: 


From: 
0708922241 
Mamma* 


Direction: 
Incoming 


2021-02-24 
15:52:53(UTC+1) 


00:01:02 


Answered 


(Sweden)* 


From: 
0708922241 
Mamma* 


Direction: 
Incoming 


2021-02-25 
14:31:32(UTC+1) 


00:00:00 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Source: 


From: 
m ` o 
Valentina * 


Direction: 
Incoming 


2021-02-25 
22:02:20(UTC+1) 


00:00:00 


Missed 


Network 
Name: 
Unknown 
network 
(Sweden)* 


Valentina * 


Direction: 
Incoming 


2021-02-25 
22:02:42(UTC+1) 


00:00:00 


Missed 


Network 
Name: 
Unknown 
network 
(Sweden)* 


From: 


We 0 


Valentina * 


Direction: 
Incoming 


2021-02-25 
22:02:57(UTC+1) 


00:00:00 


Missed 


Network 
Name: 
Unknown 
network 
(Sweden)* 


From: 

HS ` ` 4 @s.whats 
app.net 

les secrets de la vie 


0: 
46790223662 (9)s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-26 
14:08:33(UTC+1) 


00:00:00 


Missed 


Source: WhatsApp 

Account: 
46790223662@s.whatsapp.ne 
t 


From: 
(ye ` 4 O 
Valentina “ 


Direction: 
Incoming 


2021-02-26 
15:19:55(UTC+1) 


00:00:00 


Missed 


(Sweden)* 


Source: 
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Contacts (9) 


Contact Timestamp Entries Addresses Notes Additional info Deleted 
Name: Mahadmose User ID: 
Group: friends Username 
Source: Snapchat mahadmose 
Name: Mamma User ID: 
Source: WhatsApp ld EOCBEC65-53BD- 
Account: 41D2-A588- 
46790223662@s.wh 0327229C0BB4:ABPe 
atsapp.net rson 
WhatsApp User Id 
46709394713@s.what 
sapp.net 


Name: Mamma Phone: 
Source: Recents +46708922241 
Name: Mamma Created: User ID: 
2021-02-12 User ID EOCBEC65- 
23:47:30(UTC+1) 53BD-41D2-A588- 
0327229C0BB4:ABPe 
Modified: pu 
2021-02-12 
23:47:30(UTC+1) Phone: 
Home - 40M 3 
Name: Mamma Created: User ID: InteractionC: incoming 
2021-02-18 User ID CCC77607- interaction count: 1 
14:52:48(UTC+1) 0E41-4712-8E21- InteractionC: incoming 
E88C235BC482:ABPe interaction count: 5 
fiad: rson ` InteractionC: outgoing 
a Identifier interaction count: 5 
59. +46708922241 
14:52:50(UTC+1) 
Phone: 
Home 0708922241 
Name: taxijakt Created: User ID: InteractionC: incoming 
Source: InteractionC |2021-02-13 Identifier interaction count: 2 
10:08:56(UTC+1) +4682945258 
Name: Valentina User ID: About: Busy. 
Source: WhatsApp ld A2BA5034-E50E- 
Account: 4D41-995D- 
46790223662@s.wh 05A839046DA8 
atsapp.net WhatsApp User ld 
Photos: 46704336449@s.what 
Ap 9- sapp.net 
1596298864.jpg Push Name V 
Phone: 
Home +4C o 
Name: Valentina Phone: 
Source: Recents +46704336449 
Name: Valentina Created: User ID: InteractionC: incoming 
2021-02-17 User ID A2BA5034- interaction count: 6 
00:47:24(UTC+1) E50E-4D41-995D- InteractionC: incoming 
05A839046DA8 interaction count: 17 
Gad: InteractionC: outgoing 
Modified: ... Phone: interaction count: 117 
00:47:24(UTC+1) Home +46 ` ` o 
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Device Connectivity (4) 
# Device Name Device type Start time Connectivity Device Identifiers | Additional info Source Deleted e | 
method 
1 Balosaudi Unknown 2021-02-16 Bluetooth Address: Artifact Family: Source: D 
23:19:38 Connectivity 9C:DF:03:BD:34:4F Service Identifier: 
nature: 
Source 
Detected Repository Path: 
2 PASSAT GTR Unknown 2021-02-17 Bluetooth Address: Artifact Family: Source: O 
21:04:41 Connectivity 30:C3:D9:37:8E:86 Service Identifier: 
nature: 
Source 
Detected Repository Path: 
3 Pins Free Headset 2021-02-20 Bluetooth Address: Artifact Family: Source: o 
16:18:28 Connectivity F4:4E:FC:A5:22:1F Service Identifier: 
nature: 
Source 
Detected Repository Path: 
4 My Volvo Car Unknown 2021-02-25 Bluetooth Address: Artifact Family: | Source: O 
09:54:33 Connectivity 58:16:D7:4E:3D:51 Service Identifier: 
nature: 
Source 
Detected Repository Path: 
GPS 
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Locations (7) @ open in Google Earth Open in Google Maps HEMLIG 


1 (59.307625, 18.076355) Description: Skanstull o 


Time: 2021-02-14 06:04:01(UTC+1) 
Source: Safari 
Service Identifier: 


2 (59.364926, 17.974430) Time: 2021-02-16 21:42:05(UTC+1) o 
Source: Safari 
Service Identifier: 


3 (59.372415, 18.003369) Description: Quality Hotel Friends, Searched o 
Solna, Stockholms làn, Sverige 


Name: Quality Hotel Friends 


Time: 2021-02-16 22:56:36(UTC+1) 
Source: Booking.com 
Service Identifier: 


4 Description: eddie jobe D 


Time: 2021-02-15 21:06:55(UTC+1) 
Source: KnowledgeC 
Service Identifier: 


5 Description: eddie jobe D 


Time: 2021-02-15 21:06:56(UTC+1) 
Source: Safari 
Service Identifier: 


6 Description: eddie jobe D 


Time: 2021-02-15 21:06:56(UTC+1) 
Source: Safari 
Service Identifier: 


if Description: eddie jobe D 


Time: 2021-02-15 21:07:00(UTC+1) 
Source: Safari 
Service Identifier: 


Notes (1) 
1 Created: Title: 4595 kod Account: 127B225E-BD11-4F92-8B8E- > 
2021-02-12 Source: Notes D9FB6F76198A 
23:48:07(UTC+1) Labels: 
Modified: Body: 4595 kod 
2021-02-12 Parties: 


23:48:11(UTC+1) 


10 
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Searched Items (11) 


1 2021-02-14 Safari skanstull Unknown D 
06:03:18(UTC+1) 
2 2021-02-14 Safari Skanstull Unknown D 
06:03:28(UTC+1) Position: 
(59.307625, 
18.076355) 
3 2021-02-14 Safari Skanstull, 118 60 Unknown D 
06:03:29(UTC+1) Stockholm 
Position: 
(59.307625, 
18.076355) 
4 2021-02-14 Safari skanstull mc Unknown D 
06:04:34(UTC+1) 
5 2021-02-14 Safari skanstull öppet nu Unknown D 
06:05:21(UTC+1) 
6 2021-02-14 Safari skanstull óppet nu Unknown D 
06:06:12(UTC+1) 
7 2021-02-15 Safari eddie jobe Unknown D 
19:40:25(UTC+1) 
8 2021-02-15 Safari eddie j Unknown D 
19:40:42(UTC+1) 
9 2021-02-15 Safari kva saltvik Unknown D 
22:07:06(UTC+1) 
10 [2021-02-15 Safari háktet góteborg Unknown D 
22:21:03(UTC+1) 
11 2021-02-15 KnowledgeC háktet góteborg Unknown D 
22:21:20(UTC+1) adre 


User Accounts (13) 


1 


Creation time 
2021-02-12 
19:41:54(UTC+1) 
Username: 


Porn: nd @hotmail.com 


Service Type: 127B225E-BD11- 
4F92-8B8E-D9FB6F76198A 


Source: Accounts 


Account 
Description: 
iCloud 


Creation time 
2021-02-12 
19:41:49(UTC+1) 
Username: 


pel? Qhotmail.com 


Service Type: D581A404-FE94- 
4D08-B346-B1FDFDDB3B28 


Source: Accounts 


Account 
Description: 
Device Locator 


Creation time 
2021-02-12 
19:41:54(UTC+1) 
Username: 


Porn: nd @hotmail.com 


Service Type: 02464211-FB70- 
4808-BOA7-ACF6A2DB3AED 


Source: Accounts 


Account 
Description: 
IDMS 


Creation time 
2021-02-12 
19:41:55(UTC+1) 
Username: 


Porn: nd @hotmail.com 


Service Type: D83321D7-ABAA- 
4C9C-A534-E66312D63A13 


Source: Accounts 


Account 
Description: 
Apple ID 


11 
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179 


pel MENO? O hotmail.com 


Service Type: D315EB44-93E4- 
410A-8F11-E6059076BEA9 


Source: Accounts 


Creation time ee E t 
19:52:23(UTC+1) iTunes S Pal. MLI 
Username: 


6 Creation time Account 
2021-02-12 Description: 
20:13:29(UTC+1) Hotmail 
Username: 
pon d @hotmail.com 
Service Type: 194B5D3E-0728- 
4BB3-A6FD-57D29FEFF 145 
Source: Accounts 

7 Creation time Account 
2021-02-12 Description: 
20:22:16(UTC+1) CloudKit 
Username: 

EEN ` and @hotmail.com 
Service Type: 5A38667F-6D4A- 
4473-A0E0-3228A4316934 
Source: Accounts 

8 Creation time Account 
2021-02-12 Description: 
20:24:08(UTC+1) Messages 
Username: 
pel "MENO? O hotmail.com 
Service Type: 4CF534D4-7C44- 
4CEF-8B7A-68066A03D28E 
Source: Accounts 

9 Creation time User ID: About: Hallá 
Account Name: Mahad WhatsApp User Id dar! Jag 

46790223662@s.whatsapp.net anvánder 
WhatsApp. 
Source: WhatsApp pp 

10 | Creation time User ID: Biography: M.VD.T JM 
Username: mahadmose Instagram Id 1050949595 TG 
Account Name: mahadmose Profile Picture: 

Photo Url https://scontent-arn2- 
1.cdninstagram.com/v/t51.2885- 
Source: Instagram 19/s150x150/28157231 2072532 
109628182 85813638129621401 
. ; 6 njpg? nc ht=scontent-arn2- 
Photos: pnetot jbg 1.cdninstagram.com& nc ohc=Y 
9DJFUZFUW4AX8UnoUj8tp=180 
h=013c3c0201712afc7e26fa97b7 
e160cd&0e=606189B5 

11 | Creation time User ID: 

Username: orte.n421 Instagram Id 45995202971 

Account Name: orte.n421 Profile Picture: 
Photo Url https://scontent-sea1- 
1.cdninstagram.com/v/t51.2885- 

Source: Instagram 19/44884218_345707102882519 
. 2446069589734326272 njpg? - 

a nc ht=scontent-sea1- 

E 1.cdninstagram.com& nc ohc=8 
AUoZNYMP5IAX- 
Y52pR&oh=1d23d094e49f5d216e 
0d1859269337d1&0e=605FE68F 
&ig cache keyzYWb5vbnltb3VzX3 
Byb2ZpbGVfcGlj.2 

12 | Creation time User ID: 


Username: pontuslindstrand 


Account Name: Pontus 
Lindstrand 


Source: Instagram 


Photos: photo1.jpg 


Instagram Id 217392203 


Profile Picture: 

Photo Url https://scontent-arn2- 
1.cdninstagram.com/v/t51.2885- 
19/5150x150/26157575 1445896 
72917481 297855711394660352 
 n.jpg? nc ht=scontent-arn2- 
1.cdninstagram.com& nc ohc=1s 
YY cqW970AX- 
IHxvu&tp=1&0h=eb7b2c44f296f8 
304adb5666f1c0064a&0e=60607 
013 


12 


aga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Bil 
13 


Creation time 


Username: mahadmose4211 
Account Name: thugz Mansion 


Source: Snapchat 


180 


User ID: 
96f409f9b03d 


Email: 
Email Address 


Phone: 
Mobile Phone Number 
+46793349073 


User ID ca10df2d-08df-4a1c-b8fe- 


mahad a496(Qhotmail.com 


Birthday: 1996-10-24 
22:00:00(UTC+0) 


Web History (280) 


# Title URL Last Visited | Visits po Additional info | Source Info Deleted 
attern 
1 E-post - mahad | https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook ADAwATYWMAItZjlyADKtMGUyNCOWMAItM | 14:22:19(UTC Account: 
DAKABAA5NWMNvXEMEyZp9zOPic70Q% | #1) Source Service 
0, H H 
3D%3D Repository Path: Identifier: 
2 E-post - mahad |https://outlook.live.com/mail/O/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook ADAwATYWMAItZjlyADkKtMGUyNCOWMAItM | 14:22:19(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Source Service 
0, H e 
3D%3D/ Repository Path: Identifier: 
3 E-post - mahad | https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 Artifact Family: Source: 
alii - Outlook [ADAwATYwMAItZjlyADktMGUyNCOwWMAItM | 14:22:20(UTC KnowledgeC 
DAKABAA5NWMNvXEMEyZp9zOPic70Q% | #1) Account: 
3D%3D/ Source Service 
Repository Path: Bar. 
Identifier: 
4 E-post - mahad | https://outlook.live.com/mail/0/inbox 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook 14:22:26(UTC Account: 
*1) Source Service 
Repository Path: | Identifier: 
5 E-post - mahad |https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook ` |ADAWATYwMAItZjlyADktMGUyNCOWMAItM | 14:22:32(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Source Service 
0, H H 
3D%3D Repository Path: Identifier: 
6 E-post - mahad |https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook [ADAwATYwMAItZjlyADktMGUyNCOwWMAItM | 14:22:32(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Source Service 
0, H = 
3D%3D/ Repository Path: Identifier: 
7 E-post - mahad | https://outlook.live.com/mail/0/compose/AQM | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook kADAwATYwMAItZjlyADktMGUyNCOWMAIt | 14:22:34(UTC Account: 
MDAKAEYAAAOOKkS5ikJG6RJgf5v73iwSYB | +1) s Service 
wAM2nzdDOHET4FpPFPhZi3BAAACAQ8A Repository Path: | Identifier: 
AAAM2nzdDOHET4FpPFPhZi3BAAQi4vpvA A EE 
AAA 
8 E-post - mahad | https://outlook.live.com/mail/0/compose/AQM | 2021-02-13 Artifact Family: Source: 
alii - Outlook  [kADAwATYwMAItZjlyADktMGUyNCOwMAIt | 14:22:35(UTC KnowledgeC 
MDAKAEYAAAOOKkS5ikJG6RJgf5v73iwSYB | +1) s Account: 
wAM2nzdDOHET4FpPFPhZi3BAAACAQ8A Repository Path: | Service 
AAAM2nzdDOHET4FpPFPhZi3BAAQi4vpvA epository Fath: | identifier: 
AAA 
9 E-post - mahad | https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook ` | ADAWATYwMAItZjlyADktMGUyNCOWMAItM | 14:22:38(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Service 
3D%3D Source Identifier: 
Repository Path: 8 
10 E-post - mahad | https://outlook.live.com/mail/0/inbox 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook 14:22:42(UTC Account: 
+1) Source Service 
Repository Path: | Identifier: 
11 E-post - mahad |https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook | ADAwATYWMAItZjlyADKtMGUyNCOWMAItM | 14:34:07(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Source Service 
0, H H 
3D%3D Repository Path: Identifier: 
12 E-post - mahad | https://outlook.live.com/mail/O/inbox 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook 14:34:08(UTC Account: 
+1) Source Service 
Repository Path: | Identifier: 
13 E-post - mahad | https://outlook.live.com/mail/0/inbox 2021-02-13 Artifact Family: Source: 
alii - Outlook 14:34:15(UTC KnowledgeC 
+1) Source Account: 
; . | Service 
Repository Path: Identifier: 
14 E-post - mahad |https://outlook.live.com/mail/O/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook ADAwATYWMAItZjlyADKtMGUyNCOWMAItM | 14:34:56(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Source Service 
0, H e 
3D%3D Repository Path: Identifier: 
15 E-post - mahad |https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 1 Artifact Family: | Source: Safari 
alii - Outlook ` |ADAWATYWMAItZjlyADktMGUyNCOwMAILtM | 14:34:56(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Source Service 
0, H H 
3D%3D/ Repository Path: Identifier: 
16 E-post - mahad | https://outlook.live.com/mail/0/compose/AQM | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook kADAWATYwMAItZjlyADktMGUyNCOWMAIt 14:35:00(UTC Account: 
MDAKAEYAAAO0KSSIkJGERJgf5V73jwSYB | +1) s Service 
wAM2nzdDOHET4FpPFPhZi3BAAACAQ8A Repository Path: | Identifier: 
AAAM2nzdDOHET4FpPFPhZi3BAAQi4vpw epository Path: 


AAAA 
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E-post- nüps:/Ouuook.Iive.com/mall/U/InDOX/Ta/AUIUK | 2021-02-13 Artract Family: — | Source: pata t 
alii - Outlook | ADAWATYWMAItZjlyADktMGUyNCOWMAItM | 14:35:03(UTC Account HEMLI 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) s Service 
3D%3D ourco . | Identifier: 
Repository Path: 
18 E-post - mahad | https://outlook.live.com/mail/0/inbox 2021-02-13 Artifact Family: Source: Safari D 
alii - Outlook 14:35:05(UTC Account: 
+1) Source Service 
Repository Path: | Identifier: 
19 E-post - mahad |https://outlook.live.com/mail/0/inbox/id/AQQk | 2021-02-13 Artifact Family: | Source: Safari o 
alii - Outlook | ADAWATYWMAItZjIyADKtMGUyNCOWMAItM | 14:35:09(UTC Account: 
DAKABAASNWMNvXEMEyZp9zOPic70Q% | +1) Source Service 
0, H H 
3D%3D Repository Path: Identifier: 
20  |E-post - mahad |https://outlook.live.com/mail/0/compose/AQM | 2021-02-13 Artifact Family: | Source: Safari o 
alii - Outlook kADAwATYWMAItZjlIyADKtMGUyNCOWwMAIt | 14:35:14(UTC Account: 
MDAKAEYAAAOOKSSIkKJGGRJgfSv73jwSYB | +1) S Service 
wAM2nzdDOHET4FpPFPhZi3BAAACAQ8A parce h: | Identifier: 
AAAM2nzdDOHET4FpPFPhZi3BAAQidvpxA Repository Path: 


E-post - mahad 
alii - Outlook 


AAA 


https://outlook.live.com/mail/O/inbox/id/AQQk 
ADAwATYwWMAItZ¡lyADktMGUyNCOwMAItM 
DAKABAASNWMNvXEMEyZp9zOPic70Q% 
3D%3D 


2021-02-13 
14:35:16(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/compose/AQM 
kADAwATYWMAItZjlyADKtMGUyNCOWMAIt 
MDAKAEYAAAOOKS5ikJG6RJgf5v73jwSYB 
wAM2nzdDOHET4FpPFPhZi3BAAACAQ8A 
AAAM2nzdDOHET4FpPFPhZi3BAAQi4vpyA 
AAA 


2021-02-13 


14:35:30(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


E-post - mahad 
alii - Outlook 


E-post - mahad 
alii - Outlook 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/inbox/id/AQQk 
ADAWATYwMAItZjlyADktMGUyNCOwMAItM 
DAKABAASNWMNvXEMEyZp9zOPic70Q% 
3D%3D 


https://outlook.live.com/mail/0/inbox 


https://outlook.live.com/mail/O/inbox/id/AQQk 
ADAWATYwMAItZjlyADktMGUyNCOwMAItM 
DAKABAASNWMNvXEMEyZp9zOPic70Q% 
3D%3D 


2021-02-13 
14:35:40(UTC 
+1) 


2021-02-13 


14:35:44(UTC 
+1) 


2021-02-13 
14:35:46(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Source: Safari 
Account: 
Service 
Identifier: 


Source: Safari 
Account: 
Service 
Identifier: 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/compose/AQM 
kADAwATYwWMAItZjlyADktMGUyNCOwMAIt 
MDAKAEYAAAOOkSSikJG6RJgf5v73jwSYB 
wAM2nzdDOHET4FpPFPhZi3BAAACAQ8A 
AAAM2nzdDOHET4FpPFPhZi3BAAQi4vpzA 
AAA 


2021-02-13 
14:35:54(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


E-post - mahad 
alii - Outlook 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/inbox/id/AQQk 
ADAWATYwMAItZjlyADktMGUyNCOwMAItM 
DAKABAASNWMNvXEMEyZp9zOPic70Q% 
3D%3D 


https://outlook.live.com/mail/0/inbox 


2021-02-13 
14:35:59(UTC 
+1) 


2021-02-13 
14:36:02(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Source: Safari 
Account: 
Service 
Identifier: 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/inbox/id/AQQk 
ADAWATYwMAItZjlyADktMGUyNCOwMAItM 
DAKABAA5NWMNvXEMEyZp9zOPic70Q% 
3D%3D 


2021-02-13 
14:39:04(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/compose/AQM 
kADAWATYwMAItZjlyADktMGUyNCOwMAIt 
MDAKAEYAAAOOKS5ikJG6RJgf5v73jwSYB 
wAM2nzdDOHET4FpPFPhZi3BAAACAQ8A 
AAAM2nzdDOHET4FpPFPhZi3BAAQi4vp0A 
AAA 


2021-02-13 
14:39:10(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


E-post - mahad 
alii - Outlook 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/O/inbox/id/AQQk 
ADAWATYwMAItZjlyADktMGUyNCOwMAItM 
DAKABAA5NWMNvXEMEyZp9zOPic70Q% 
3D%3D 


https://outlook.live.com/mail/0/inbox 


2021-02-13 


14:39:28(UTC 
+1) 


2021-02-13 
14:39:32(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Source: Safari 
Account: 
Service 
Identifier: 


Dropbox - 
Förundersökni 
ngsprotokoll — 
Förenkla ditt liv 


https://www.dropbox.com/sh/dejwsl48x6dg1a 
z/AADhLYrUBhuxBTDxALly_PnZa?dl=0 


2021-02-13 
19:21:05(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


2019 
Mercedes- 
Benz A 200, 
Svart / 163hk 
pa 
Biluppgifter.se 


https://biluppgifter.se/fordon/JRG240 


2021-02-14 
03:29:21(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


35 2020 Volvo https://biluppgifter.se/fordon/JSN49S 2021-02-15 Artifact Family: | Source: Safari D 
XE D4 14:58:39(UTC Account: 
6 +1) s Service 
Å ource Pr 
WOOK pa / Repository Path: Identifier: 
Biluppgifter.se 
36 2018 Nissan https://biluppgifter.se/fordon/NHC077 2021-02-15 Artifact Family: | Source: Safari D 
ee 14:59:09(UTC Account: 
-T, RÖ +1) Service 
116hk på Source sl 
Biluppgifter. se Repository Path: | Identifier: 
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vu nupsz7/bimppgrier.se/Toraon/u TIViZzou 021-02-15 T Artiract Family: Source: pata E: 
olkswagen 18:51:04(UTC Account 
Passat, Svart / +1) | Source Service HEMLI 
190hk pa ñ ifier: 
Bilupp difter.se Repository Path: | Identifier: 
38 2021 https://biluppgifter.se/fordon/MXP72X 2021-02-15 1 Artifact Family: | Source: Safari o 
NE as, 19:03:39(UTC Account: 
enz +1 Service 
DE, Mörkblå / Source . | identifier: 
194hk på Repository Path: 
Biluppgifter.se 
39 Quality Hotel  |https://www.booking.com/hotel/se/quality- 2021-02-16 1 Artifact Family: | Source: Safari o 
Friends i Solna |friends.sv.html?label-gen173nr- 13:58:39(UTC Account: 
— uppdaterade |1FCAEoggl46AdIM1gEaMgBiAECmAEIuAE | +1) S Service 
priser för 2021 | HYAEN2AEB6AEB-AELIiAIBgAIDuAK3gq- Repoatt Path: | Identifier: 
BBsACAdICJDFiNDFjYzg1LWM5MWYtNGM COS aln: 
zZ805MmMOLWFKkZmIzZDNmMzMyMNgCB 
uACAQ&sid-cb602dccc0a7647ccb33ac1440 
501f9a&all sr blocks-54686601 23091344 
0 0 1 0%2C54686601 230913440 0 1 0 
&checkin=2021-02-18&checkout=2021-02- 
21&dest_id=- 
2522526&dest type=city&group adults=4&g 
roup children=0&hapos=1&highlighted bloc 
ks-54686601 230913440 0 1 0%2C54686 
601 230913440 0 1 O&hpos-1&no rooms 
=2&req adults=4&req children=0&room1=A 
%2CA&room2=A%2CA&sr order-popularity 
&srepoch=1613480313&srpvid=e8ae5b3ce2 
dd006e&ucfs=1&matching block id=546866 
01 230913440 0 1 O&srhp=1&ref is wl 
40 Booking.com: |https://secure.booking.com/book.html 2021-02-16 1 Artifact Family: | Source: Safari o 
Sista steget 14:01:02(UTC Account: 
+1) Source Service 
Repository Path: | Identifier: 
41 Taxi | Boka taxi | https://taxijakt.se/ 2021-02-16 1 Artifact Family: | Source: Safari D 
online S SE 15:09:39(UTC Account: 
ast pris +1) Source Service 
Taxijakt.se Repository Path: Identifier: 
42 Branco - https://www.google.se/search?q=Branco+- | 2021-02-16 1 Artifact Family: | Source: Safari o 
JIGGY (feat. +JIGGY (feat.+Yasin)+(Original)&ie=UTF- 16:42:35(UTC Account: 
Yasin) 8&oe-UTF-8&hl-sv-se&client-safari +1) Sour Service 
(Original) - Sók Repository Path: | Identifier: 
på Google epository Path: 
43 Branco - https://www.google.se/search?q=Branco+- | 2021-02-16 1 Artifact Family: | Source: Safari D 
JIGGY (feat. +JIGGY (feat.+Yasin)+(Original)8ie=UTF- 16:42:36(UTC Account: 
Yasin) 8&oe-UTF-8&hl-sv-se&client-safari *1) S Service 
(Original) - Sók ource . | Identifier: 
pa Google Repository Path: 
44 YouTube https://m.youtube.com/watch?v=BFPfiVfiG44 | 2021-02-16 1 Artifact Family: | Source: Safari D 
16:42:39(UTC Account: 
+1) Service 
Source Identifier: 


Branco Ft 
Yasin - JIGGY 
(Official Lyrics) 
- YouTube 


https://m.youtube.com/watch?v-BFPfiVfiG44 


2021-02-16 
16:42:39(UTC 
*1) 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Branco Ft 
Yasin - JIGGY 
(Official Lyrics) 
- YouTube 


https://m.youtube.com/watch?v-BFPfiVfiG44 


2021-02-16 
16:42:45(UTC 
*1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Branco Ft 
Yasin - JIGGY 
(Official Lyrics) 
- YouTube 


https://m.youtube.com/watch?v-BFPfiVfiG44 


2021-02-16 
18:01:20(UTC 
*1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Skottlossning i 
Sundbyberg — 
en skadad | 
Aftonbladet 


https://www.aftonbladet.se/senastenytt/a/7K 
mLkB/en-skadad-efter-misstankt- 
skottlossning 


2021-02-16 


20:24:28(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


flashback - Sök 
pá Google 


https://www.google.se/search?q-flashback&i 
e=UTF-8&0e=UTF-8&hl=sv-se&client=safari 


2021-02-16 
20:30:23(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


50 flashback - Sök | https://www.google.se/search?q=flashback&i | 2021-02-16 1 Artifact Family: | Source: Safari D 
pa Google e-UTF-8&oe-UTF-8&hl-sv-se&client-safari | 20:30:24(UTC Account: 
*1) Source Service 
Repository Path: | Identifier: 
51 Flashback https://www.flashback.org/ 2021-02-16 1 Artifact Family: | Source: Safari o 
Feum, ihel 20:30:26(UTC Account: 
randefrihe +1) Service 
Ne Source far 
på riktigt! Repository Path: Identifier: 
52 Flashback https://www.flashback.org/aktuella-amnen 2021-02-16 1 Artifact Family: Source: Safari o 
Forum - 20:30:30(UTC Account: 
uella +1) s Service 
Å ource at, 
ámnen Repository Path: Identifier: 
53 Flashback https://www.flashback.org/aktuella-amnen 2021-02-16 Artifact Family: | Source: o 
Forum - 20:30:35(UTC KnowledgeC 
ella : 
ámnen = Source Servos. 
Repository Path: Identifier: 
54 Flashback https://www.flashback.org/nya-amnen 2021-02-16 1 Artifact Family: | Source: Safari D 
Forum - Nya 20:30:44(UTC Account: 
ámnen +1) Service 
Source Identifier: 


Repository Path: 
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[ps 7/WWW.Tlasnpack.orgimya-armnern 021-02-16 Artiract Family: | Source: Cs 
Forum - Nya 20:30:45(UTC Knowledge] FM LI 
ámnen +1) Source Account 

` . | Service 
Repository Path: Identifier: 

56 Flashback https://www.flashback.org/aktuella-amnen 2021-02-16 Artifact Family: | Source: Safari o 
oa S 20:30:50(UTC Account: 

uella +1) Service 
ámnen Source Identifier: 


Skottlossning i 
Sundbyberg — 
en skadad 
Aftonbladet 


Skottlossning i 
Sundbyberg — 
en skadad 
Aftonbladet 


https://www.aftonbladet.se/senastenytt/a/7K 
mLkB/man-skadad-efter-misstankt- 
skottlossning 


https://www.aftonbladet.se/senastenytt/a/7K 
mLkB/man-skadad-efter-misstankt- 
skottlossning 


2021-02-16 
21:01:59(UTC 
+1) 


2021-02-16 
21:02:00(UTC 
+1) 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning i 
Sundbyberg — 
en skadad 
Aftonbladet 


Flashback 
Forum | 
Yttrandefrihet 
pá riktigt! 


https://www.aftonbladet.se/senastenytt/a/7K 
mLkB/man-skadad-efter-misstankt- 
skottlossning 


https://www.flashback.org/ 


2021-02-16 
21:02:05(UTC 
+1) 


2021-02-16 
21:04:44(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Source: Safari 
Account: 
Service 
Identifier: 


Flashback 
Forum - 
Aktuella 
ámnen 


https://www.flashback.org/aktuella-amnen 


2021-02-16 
21:04:49(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Flashback 
Forum - 
Aktuella 
ámnen 


Flashback 
Forum - Nya 
ámnen 


https://www.flashback.org/aktuella-amnen 


https://www.flashback.org/nya-amnen 


2021-02-16 
21:04:50(UTC 
+1) 


2021-02-16 
21:05:34(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Source: Safari 
Account: 
Service 
Identifier: 


Taggsök 


https://www.flashback.org/search tags.php 


2021-02-16 
21:05:37(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Flashback 
Forum - Nya 
inlågg 


https://www.flashback.org/nya-inlagg 


2021-02-16 
21:05:39(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Flashback 
Forum 


https://www.flashback.org/t3305870 


2021-02-16 
21:05:44(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Sidan 2 - 
Flashback 
Forum 


https://www.flashback.org/t3305870p2 


2021-02-16 
21:05:50(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Flashback 
Forum 


https://www.flashback.org/t3305870 


2021-02-16 
21:05:51(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Flashback 
Forum 


https://www.flashback.org/t3305870 


2021-02-16 
21:05:55(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Sidan 2 - 
Flashback 
Forum 


https://www.flashback.org/t3305870p2 


2021-02-16 
21:07:47(UTC 


+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Sidan 2 - 
Flashback 
Forum 


https://www.flashback.org/t3305870p2 


2021-02-16 
21:07:50(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Sidan 2 - 
Flashback 
Forum 


https://www.flashback.org/t3305870p2 


2021-02-16 
21:10:55(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Flashback 
Forum | 
Yttrandefrihet 
pa riktigt! 


https://www.flashback.org/ 


2021-02-16 
21:18:48(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 
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IHüps7WWW-Tasnpack.orgmya-mnragg 021-02-16 Artiract Family: | Source: Bata e 
Forum - Nya 21:18:52(UTC Account HEM LI 
e a Source  |Sericel 
Repository Path: E 
74 Skottlossning |https://www.flashback.org/t3305870 2021-02-16 Artifact Family: | Source: Safari D 
en 16 21:18:55(UTC Account: 
undbyberg +1) Source ervice 
feb 2021 - ` . | Identifier: 
Flashback Repository Path: 
Forum 
76 Skottlossning |https://www.flashback.org/t3305870p3 2021-02-16 Artifact Family: | Source: Safari o 
ee arn 46 21:18:58(UTC Account 
undbyberg +1) Source ervice 
feb 2021 - i ifier: 
Sidan 3. Repository Path: | Identifier. 
Flashback 
Forum 
77 Skottlossning  |https://www.flashback.org/t3305870p3 2021-02-16 Artifact Family: | Source: D 
Tulegatan 21:19:00(UTC KnowledgeC 
Sundbyberg 16 +1) Source Account 
= ` . | Service 
Sidan 3 - Repository Path: | Identifier: 
Flashback 
Forum 


Du lámnar nu 


https://www.flashback.org/leave.php?u=https 


2021-02-16 


Artifact Family: 


Source: Safari 


Flashback %3A%2F%2Fwww.aftonbladet.se%2Fsenast | 21:19:51(UTC Account: 
Forum enytt%2Fa%2F7KmLkB%2Fman-skadad- +1) Source Service 
efter-misstankt-skottlossning Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-misstankt- 21:31:09(UTC Account: 
en skadad | skottlossning +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i | https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg — |mLkB/man-skadad-efter-misstankt- 21:31:15(UTC KnowledgeC 
en skadad | skottlossning +1) Source Account: 
Aftonbladet : i 
onblade Repository Path: a 

81 Skottlossning |https://www.flashback.org/t3305870p3 2021-02-16 Artifact Family: | Source: D 
Tulegatan 21:34:05(UTC KnowledgeC 
Sundbyberg 16 +1) Source a 

eb 2021 - f . | Service 
Sidan 3 - Repository Path: | Identifier: 
Flashback 

Forum 

82 Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: Safari D 

Tilagaan 21:34:44(UTC an 
undbyberg 16 +1) Source ervice 
EN 2 i Repository Path: | Identifier: 

Flashback 
Forum 

83 Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: EN 
Tulegatan 21:34:50(UTC KnowledgeC 
Sundbyberg 16 +1) Source Account: 

eb 2021 - ` . | Service 
Sidan 4 - Repository Path: Identifier: 
Flashback 

Forum 

84 Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: o 
Tulegatan 21:41:45(UTC KnowledgeC 
Sundbyberg 16 *1) Source Account: 
feb 2021 - Repository Path: | Service 
Sidan 4 - H ry * | Identifier: 

Flashback 
Forum 

85 Du lämnar nu  |https://www.flashback.org/leave.php?u-https | 2021-02-16 Artifact Family: | Source: Safari D 
Flashback %3A%2F %2Fgoo.gl%2Fmaps%2FUVSXVG |21:42:03(UTC Account: 

Forum qxsjkbXNKA9 *1) Saure Service 
` . | Identifier: 
Repository Path: 
86 https://goo.gl/maps/UVsXVGqxsjkbXNKA9 | 2021-02-16 Artifact Family: | Source: Safari o 
21:42:05(UTC Piae 
*1) Source ervice 
Repository Path: | Identifier: 

87 https://www.google.se/maps/@59.3649269,1 | 2021-02-16 Artifact Family: | Source: Safari o 
7.97443,3a,75y,356.4h,96.44t/data=!3m6!1e | 21:42:05(UTC Account: 
1!3m4!1sD2qsM9e_FlwhOhTS8JvOFA!2e0!7 | +1) Gan Service 
i 18i 2 = ifier: 
11638418i8192?shorturl=1 Repository Path: Identifier: 

88 Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: O 
Tulegatan 22:02:15(UTC KnowledgeC i 
Sundbyberg 16 +1) Source Account: 
feb 2021 - Repository Path: Service 
Sidan 4 - pository Fat: | Identifier: 

Flashback 
Forum 

89 Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: o 
Tulegatan 22:03:00(UTC KnowledgeC 
Sundbyberg 16 *1) Source: Account: 
feb 2021 - Repository Path: Service 
Sidan 4 - p y * | Identifier: 

Flashback 
Forum 

90 Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: D 
Tulegatan 22:03:25(UTC KnowledgeC 
Sundbyberg 16 +1) Source Account: 
feb 2021 - Repository Path: Service 
Sidan 4 - pository Fath: | identifier: 

Flashback 
Forum 
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T å g 


MUPST/WWW.TlasnNDaCck.Org/133U587Up4 -T6 Arüract Family: 
Tulegatan 22:08:10(UTC 
Sundbyberg 16 +1) s 
E La Repository Path: 
Sidan 4 pository Fath: | identifier: 
ashbac| 
Forum 

92 Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: 
Tulegatan 22:08:30(UTC KnowledgeC 
Sundbyberg 16 +1) s Account: 
feb 2021 - ue i 

Repository Path: | Service 
Sidan 4 S pository Fath: | Identifier: 
ashbac| 
Forum 

93 Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:08:38(UTC Account: 
en skadad skottlossning *1) Source Service 
Aftonbladet Repository Path: Identifier: 

94 Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:08:38(UTC Account: 
en skadad skottlossning +1) s Service 
Aftonbladet Repository Path: Identifier: 

95 Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - |mLkB/man-skadad-efter-misstankt- 22:09:17(UTC Account: 
en skadad skottlossning +1) s Service 
Aftonbladet Repository, Path: | Identifier: 

96 Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg — |mLkB/man-skadad-efter-misstankt- 22:09:20(UTC KnowledgeC 
en skadad skottlossning +1) s Account: 
Aftonbladet eu . | Service 

Repository Path: Identifier: 

97 Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-misstankt- 22:10:56(UTC Account: 
en skadad | skottlossning +1) s Service 
Aftonbladet EE Path: | Identifier: 

98 Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg — |mLkB/man-skadad-efter-misstankt- 22:11:00(UTC KnowledgeC 
en skadad | skottlossning +1) s Account: 
Aftonbladet ource . | Service 

Repository Path: identifier: 

99 Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - |mLkB/man-skadad-efter-misstankt- 22:22:19(UTC Account: 
en skadad skottlossning +1) s Service 
Aftonbladet ERC Path: | Identifier: 

100 |Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - |mLkB/man-skadad-efter-misstankt- 22:22:19(UTC Account: 
en skadad skottlossning +1) s Service 
Aftonbladet Repository. Path: Identifier: 

101 |Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - |mLkB/man-skadad-efter-misstankt- 22:22:38(UTC Account: 
en skadad skottlossning +1) Source Service 
Aftonbladet Repository Path: | Identifier: 

102 |Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg — |mLkB/man-skadad-efter-misstankt- 22:22:40(UTC KnowledgeC 
en skadad skottlossning +1) s Account: 
Aftonbladet owce . | Service 

Repository Path: identifier: 
103 |Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: | Source: 
Tulegatan 22:22:50(UTC KnowledgeC 
Sundbyberg 16 +1) s Account: 
feb 2021 - ource i 
é Repository Path: | Service 

Sidang k * | Identifier: 
ashbac| 

Forum 

104 rang https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: Safari 

ulegatan 22:23:01(UTC Account: 

Sundbyberg 16 *1) Source Service 

ps nn E Repository Path: Identifier: 

Flashback 

Forum 

105  |Skottlossning  |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: 
Tulegatan 22:23:05(UTC KnowledgeC 
Sundbyberg 16 +1) s Account: 
feb 2021 - ource i 

Å Repository Path: Service 
pidan 4 y * | Identifier: 
ashbac| 
Forum 

106  |Skottlossning  |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: 
Tulegatan 22:23:25(UTC KnowledgeC 
Sundbyberg 16 +1) s Account: 
feb 2021 - ource i 

. Repository Path: | Service 
Sidan s si y * | Identifier: 
ashbac| 
Forum 

107  |Skottlossningi |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:23:28(UTC Account: 
en skadad | Skottlossning *1) Source Service 
Aftonbladet Repository Path: Identifier: 

108  |Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg — |mLkB/man-skadad-efter-misstankt- 22:23:30(UTC KnowledgeC 
en skadad | skottlossning +1) s Account: 
Aftonbladet ource Path; | Service 

Repository Path: identifier: 
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[SKOMMOSSNING T_] TIWWW. -SET 021-02-16 Aruract Family: | Source: pata E: 
Sundbyberg — |mLkB/man-skadad-efter-misstankt- 22:26:10(UTC Account HEM LI 
en skadad skottlossning +1) Source Service 
Aftonbladet Repository Path: Identifier: 
110 |Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: D 
Sundbyberg — |mLkB/man-skadad-efter-misstankt- 22:26:15(UTC KnowledgeC 
en skadad skottlossning +1) Source Account: 
Aftenpladet Repository Path: un. 


Skottlossning i 
Sundbyberg — 
en skadad 
Aftonbladet 


Skottlossning i 
Sundbyberg — 
en skadad 
Aftonbladet 


https://www.aftonbladet.se/senastenytt/a/7K 
mLkB/man-skadad-efter-misstankt- 
skottlossning 


https://www.aftonbladet.se/senastenytt/a/7K 
mLkB/man-skadad-efter-misstankt- 
skottlossning 


2021-02-16 
22:27:43(UTC 
+1) 


2021-02-16 
22:27:45(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Sidan 5 - 
Flashback 
Forum 


https://www.flashback.org/t3305870p5 


2021-02-16 
22:33:25(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


114  |Skottlossning  |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: o 
Tulegatan 22:33:45(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - palike. Path: | Service 
Sidan5- epository Fath: | Identifier: 
ashbac| 
Forum 
115  |Skottlossning  |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: o 
Tulegatan 22:35:35(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source, Path: | Service 
dM epository Fath: | Identifier: 
ashbac| 
Forum 
116  |Skottlossningi |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari o 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:45:38(UTC Account: 
en skadad | Skottlossning *1) Source Service 
Aftonbladet Repository Path: Identifier: 
117 |Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari Es 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:45:39(UTC Account: 
en skadad | Skottlossning *1) Source Service 
Aftonbladet Repository Path: Identifier: 
118  |Skottlossning  |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: D 
Tulegatan 22:45:50(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source Path: | Service 
Paa e epository Fath: | Identifier: 
ashbac| 
Forum 
119 |Skottlossning  |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: o 
Tulegatan 22:46:20(UTC KnowledgeC 
Sundbyberg 16 *1) S Account: 
feb 2021 - Rabosit Path: | Service 
nen epository Fath: | Identifier: 
ashbac| 
Forum 
120  |Skottlossning  |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: D 
Tulegatan 22:46:45(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source. Path; | Service 
Sidan 5 epository Fath: | Identifier: 
ashbac| 
Forum 
121  |Skottlossningi |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari o 
Sundbyberg - | mLkB/man-skadad-efter-misstankt- 22:47:26(UTC Account: 
en skadad | skottlossning +1) Source Service 
Aftonbladet Repository Path: Identifier: 
122  |Skottlossning _ | https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: D 
Tulegatan 22:52:00(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - nalito Path: | Service 
Sidan5- epository Fan: | identifier: 
ashbac| 
Forum 
123  |Skottlossning _ | https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: | Source: tes 
Tulegatan 22:53:20(UTC KnowledgeC 
Sundbyberg 16 +1) s Account: 
feb 2021 - Ropostt Path: Service 
Sidan5- epository Fa: | Identifier: 
ashbac| 
Forum 
124  |Skottlossning  |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: — | Source: Safari o 
Tulegatan pa 22:55:04(UTC Account: 
undbyberg +1) Source Service 
= a e. ` Repository Path: | Identifier: 
Flashback 
Forum 
125  |Skottlossning  |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: ES 
Tulegatan 22:55:05(UTC KnowledgeC 
Sundbyberg 16 +1) s Account: 
feb 2021 - sun Path; | Service 
SE Ki epository Fath: | Identifier: 
ashbac| 


Forum 
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MUPS7/WWW.TlasnNDbaCck.Org/133U587Upb6 -02-16 Artract Family: 
Tulegatan 22:55:15(UTC 
Sundbyberg 16 +1) s 
feb 2051 = Repository Path: 
Sidar © " epository * | Identifier: 
ashbac| 
Forum 
Skottlossning  |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: 
Tulegatan 22:56:05(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Halika Path: | Service 
Sigan 6 2s 'SPOSILOTY, * | Identifier: 
ashbac| 
Forum 
Skottlossning  |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: 
Tulegatan 22:56:30(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Repos Path: | Service 
PES Së pository * | Identifier: 
ashbac| 
Forum 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - | mLkB/man-skadad-efter-skottlossning-i- 22:57:28(UTC Account: 
en skadad sundbyberg *1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i | https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg - | mLkB/man-skadad-efter-skottlossning-i- 22:57:28(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 22:58:20(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 22:58:33(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 22:58:35(UTC KnowledgeC 
en skadad sundbyberg +1) Account: 
Aftonbladet A | Series 
epository FAN: | identifier: 
Skottlossning ` |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: 
Tulegatan 23:00:05(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - el Path: | Service 
ae A pository Fath: | Identifier: 
ashbac| 
Forum 
Skottlossning |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: 
Tulegatan 23:01:30(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source, Path: | Service 
silang åk epository FAN: | identifier: 
ashbac| 
Forum 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg - | mLkB/man-skadad-efter-skottlossning-i- 23:01:35(UTC KnowledgeC 
en skadad | sundbyberg *1) Account: 
Aftonbladet Source, Path: | Service 
epository FAN: | Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 23:02:55(UTC Account: 
en skadad | sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 23:03:00(UTC KnowledgeC 
en skadad | sundbyberg +1) Account: 
Aftonbladet Source, Path; | Service 
epository Fath: | Identifier: 
Skottlossning |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: 
Tulegatan 23:03:45(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - GE Path: | Service 
N POSILOrY! * | Identifier: 
ashbac| 
Forum 
Skottlossning |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: 
Tulegatan 23:03:55(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source, Path; | Service 
Sidar e E epository FAN: | identifier: 
ashbac| 
Forum 
Skottlossning  |https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: | Source: 
Tulegatan 23:27:15(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source, Path: | Service 
Sidang " epository FAN: | Identifier: 
ashbac| 
Forum 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 23:28:13(UTC Account: 
en skadad | sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
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| SKOMIOSSNING I | TIWWW. S y 021-02-16 Artiract Family: Source: O 
Sundbyberg - |mLkB/man-skadad-efter-skottlossning-i- 23:28:15(UTC Knowledge EMLI 
en skadad | sundbyberg +1) Account 
Aftonbladet SE Path: | Service 
pository Fat: | Identifier: 
144 |Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari D 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 23:36:47(UTC Account: 
en skadad | sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg - |mLkB/man-skadad-efter-skottlossning-i- 23:36:50(UTC KnowledgeC 
en skadad | sundbyberg +1) Account: 
Aftonbladet Source, Path: | Service 
epository Fath: | Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 23:41:04(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 23:54:30(UTC KnowledgeC 
en skadad sundbyberg +1) Account: 
Aftonbladet SO Path: | Service 
epository Pal” | identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 23:54:31(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-16 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 23:54:31(UTC Account: 
en skadad sundbyberg +1) Sa Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 00:04:06(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 00:04:10(UTC KnowledgeC 
en skadad sundbyberg +1) Account: 
Aftonbladet paliko. Path: | Service 
epository Fath: | Identifier: 
Skottlossning  |https://www.flashback.org/t3305870p6 2021-02-17 Artifact Family: | Source: 
Tulegatan 00:04:30(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Ba Path; | Service 
Sidan 6 a epository Fath: | Identifier: 
ashbac| 
Forum 
153  |Skottlossning  |https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: | Source: Safari o 
IT ie 00:04:56(UTC Account: 
undbyberg +1) Source Service 
rep S A 3 Repository Path: | Identifier: 
Flashback 
Forum 
154  |Skottlossning |https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: | Source: o 
Tulegatan 00:05:00(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source rv Path: | Service 
SEE a epository * | Identifier: 
ashbac| 
Forum 
155  |Skottlossning |https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: | Source: D 
Tulegatan 00:05:35(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - El Path: | Service 
Swan 7 K pository * | Identifier: 
ashbac| 
Forum 
156  |Skottlossning  |https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: | Source: o 
Tulegatan 01:29:35(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Repository Path: | Service 
PET " posnory * | Identifier: 
ashbac| 
Forum 
157  |Skottlossningi |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: Safari o 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 01:29:35(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
158  |Skottlossning i | https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: > 
Sundbyberg - |mLkB/man-skadad-efter-skottlossning-i- 01:29:40(UTC KnowledgeC 
en skadad sundbyberg +1) Account: 
Aftonbladet E Path; | Service 
pository * | Identifier: 
159 [Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: Safari D 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 01:40:45(UTC Account: 
en skadad sundbyberg +1) Source Service 
Aftonbladet Repository Path: Identifier: 
160  |Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: o 
Sundbyberg - | mLkB/man-skadad-efter-skottlossning-i- 01:40:50(UTC KnowledgeC 
en skadad sundbyberg *1) Account: 
Aftonbladet E. Path; | Service 
pository * | Identifier: 
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16 > | T MUPST/WWW.TlasnDbaCck.Org/133U587Up7 102-17 Artiract Family: | Source: 
ulegatan 01:41:45(UTC Knowledge 
Sundbyberg 16 +1) ( Account EMLI 
feb 2021 - Sen Pam: | Sarvice 
Sigan r a epository Fath: | Identifier: 
ashbac| 
Forum 
162  |Skottlossning —|https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: | Source: 
Tulegatan 01:51:40(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Bouree, Path: Service 
Sidan 7 " epository Fath: | Identifier: 
ashbac| 
Forum 
163 |Skottlossning i |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: Safari 
Sundbyberg — |mLkB/man-skadad-efter-skottlossning-i- 02:04:52(UTC Account: 
en skadad | sundbyberg *1) Source Service 
Aftonbladet Repository Path: Identifier: 
164  |Skottlossningi |https://www.aftonbladet.se/senastenytt/a/7K | 2021-02-17 Artifact Family: | Source: Safari 
Sundbyberg — | mLkB/man-skadad-efter-skottlossning-i- 02:04:52(UTC Account: 
en skadad | sundbyberg *1) Source Service 
Aftonbladet Repository Path: Identifier: 
165  |Skottlossning |https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: | Source: 
Tulegatan 02:11:20(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source Service 
Sidan 7 - Repository Path: ua 
3 and S Identifier: 
ashbac| 
Forum 
166  |Skottlossning |https://www.flashback.org/t3305870 2021-02-17 Artifact Family: | Source: Safari 
Wiegatan 46 02:11:21(UTC Account: 
feb 2021 - "m Source Identifier: 
Flashback Repository Path: ` 
Forum 
167  |Skottlossning |https://www.flashback.org/t3305870 2021-02-17 Artifact Family: | Source: 
Tulegatan 02:11:25(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - palita Path: | Service 
ad epository Fath: | Identifier: 
orum 
168  |Skottlossning |https://www.flashback.org/t3305870 2021-02-17 Artifact Family: | Source: Safari 
Des Gral Pr 11:38:51(UTC Account: 
feb 202 1 = +1) Source Ge 
Flashback Repository Path: i 
Forum 
169 |Skottlossning |https://www.flashback.org/t3305870p8 2021-02-17 Artifact Family: | Source: Safari 
Den 16 11:38:52(UTC Account: 
undbyberg *1) Source Service 
= = A S Repository Path: | Identifier: 
Flashback 
Forum 
170 |Skottlossning  |https://www.flashback.org/t3305870p8 2021-02-17 Artifact Family: | Source: 
Tulegatan 11:38:55(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Ed Path: | Service 
Sidan g is epository * | Identifier: 
ashbac| 
Forum 
171 Skottlossning |https://www.flashback.org/t3305870 2021-02-17 Artifact Family: | Source: Safari 
pora NG 15:16:40(UTC Account: 
feb 202 1 "m Source identifier: 
Flashback Repository Path: ; 
Forum 
172 |Skottlossning |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: Safari 
Tulegatan " 15:16:43(UTC Account: 
undbyberg +1) Source Service 
ED fe ` Repository Path: | Identifier: 
Flashback 
Forum 
173 |Skottlossning  |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: 
Tulegatan 15:16:45(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - dt Path; | Service 
Saan 3 m SE * | Identifier: 
ashbac| 
Forum 
174  |Skottlossning _ | https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: 
Tulegatan 15:18:10(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Bouree Path: | Service 
Sidan 9 Ki aposkory * | Identifier: 
ashbac| 
Forum 
175  |Skottlossning  |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: 
Tulegatan 15:19:15(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Sa Path: | Service 
Siden 9 S eposter Kan: Identifier: 
ashbac| 
Forum 
176  |Skottlossning _ | https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: 
Tulegatan 15:24:05(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Bouree Path: | Service 
Sidan 9 epository Fath: | Identifier: 
ashbac| 
Forum 
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[müps7/WWW-TasnDback.orgrt33U587Up9 021-02-17 ArüractFamiy: | Source: e 
Tulegatan 15:41:55(UTC Knowledge HEM LI 
Sundbyberg 16 *1) Account 
feb 2021 - Bou Path; | Service 
Sidan9- epository Fath: | Identifier: 

ashbac| 
Forum 

178  |Skottlossning —|https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: o 
Tulegatan 15:42:35(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source, Path: | Service 
Sidan 9- epository Fath: | Identifier: 

ashbac| 
Forum 

179  |Skottlossning  |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: D 
Tulegatan 15:42:40(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - BOE Path: | Service 
piang SPOT * | Identifier: 

ashbac| 
Forum 

180  |Skottlossning |https://www.flashback.org/t3305870 2021-02-17 Artifact Family: | Source: Safari o 
en "T 17:16:57(UTC Account: 
feb 2021- “o Source identifier: 

Flashback Repository Path: : 
Forum 

181 Skottlossning  |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: Safari o 

Tulegatan T 17:16:59(UTC Account: 
undbyberg +1) Source Service 
iso e a = Repository Path: | Identifier: 

Flashback 
Forum 

182 | Skottlossning  |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: o 
Tulegatan 17:17:00(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - elle Path: | Service 
epository FAN: | Identifier: 

ashbac| 
Forum 

183  |Skottlossning |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: o 
Tulegatan 17:17:40(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - a Path; | Service 
See 'SPOSILONY: * | Identifier: 

ashbac| 
Forum 

184  |Skottlossning |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: D 
Tulegatan 17:53:05(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - dc Path: | Service 
lana PROST * | Identifier: 

ashbac| 
Forum 

185  |Skottlossning |https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: | Source: o 
Tulegatan 17:53:10(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source a Path: | Service 
dana Sposttory, * | Identifier: 

ashbac| 
Forum 

186  |Skottlossning |https://www.flashback.org/t3305870p10 2021-02-17 Artifact Family: | Source: Safari o 

Degen 16 18:51:05(UTC Account: 
undbyberg +1) Source Service 
ps E ri Repository Path: | Identifier: 

Flashback 
Forum 

187  |Skottlossning  |https://www.flashback.org/t3305870p10 2021-02-17 Artifact Family: | Source: o 
Tulegatan 18:51:10(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source Path; | Service 
Sidan 10 - pository Fath: | Identifier: 

ashbac| 
Forum 
188 https://www.booking.com/ 2021-02-17 Artifact Family: | Source: Safari o 
20:12:09(UTC Account: 
+1) Source Service 
Repository Path: | Identifier: 

189 |Booking.com | |https://www.booking.com/index.sv.html?label | 2021-02-17 Artifact Family: | Source: Safari o 

Officiell sida| |=gen173nr- 20:12:09(UTC Account: 
Basta hotellen | 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) S Service 
och HyAEN2AEBGAEBiAIBgAIDUAKI 1bWBBsAC Ge Path: | Identifier: 
boendealternat | AdICJDc2MGNjYjg5LWZkMjAtNDMyNS 1hM Ar ln FELE 

iven WVhLWYAZTQ1OTI2YjIOYtgCBeACAQ;sid- 
cb602dccc0a7647ccb33ac1440501f9a;keep 
 landing=1&sb price type-total& 

190 |Booking.com | |https://www.booking.com/index.sv.html?label | 2021-02-17 Artifact Family: | Source: o 
Officiell sida] |=gen173nr- 20:12:15(UTC KnowledgeC 
Bästa hotellen |1BCAEoggl46AdIM1gEaMgBiAECMAEIUAE | +1) s Account: 
och HyAEN2AEBGAEBIAIBgAIDuAKI1bWBBsAC Repository Path: | Service 
boendealternat | AdICJDc2MGNjYjg5LWZkMjAtNDMyNS1hM epository Fat: | Identifier: 
iven WVhLWYAZTQ1OTI2YjIOYtgCBeACAQ;sid- 

cb602dccc0a7647ccb33ac1440501f9a;keep 
 landing-1&sb price type-total& 
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19 BOOKINg.COM | | TIWWW. -T7 Artiract Family: | Source: 
Officiell sida] |=gen173nr- 20:12:15(UTC Account 
Basta hotellen | 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) Service 
och HyAEN2AEBGAEBIAIBgAIDuAKI1bWBBsAC Source . | Identifier: 
boendealternat | AdICJDc2MGNjYjg5LWZkMjAtNDMyNS1hM Repository Path: 
iven WVhLWYAZTQ1OTI2YjlOYtgCBeACAQ;sid- 
cb602dccc0a7647ccb33ac1440501f9a;keep 
 landing=1&sb price type-total&£overlay 
192 "Booking com | |https://www.booking.com/index.sv.html?label | 2021-02-17 Artifact Family: | Source: Safari 
Officiell sida| |=gen173nr- 20:12:20(UTC Account: 
Basta hotellen | 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) Service 
och HyAEN2AEBGAEBIAIBgAIDuAKI1bWBBsAC Source h: | Identifier: 
boendealternat | AdICJDc2MGNjYjg5L WZKkMjAtNDMyNS 1hM Repository Path: 
iven WVhLWY4ZTQ10TI2YjI0YtgCBeACAQ;sid= 
cb602dccc0a7647ccb33ac1440501f9a;keep 
 landing-1&sb price type-total& 
193 |Booking.com | |https://www.booking.com/index.sv.html?label | 2021-02-17 Artifact Family: | Source: Safari 
Officiell sida] |=gen173nr- 20:12:20(UTC Account: 
Basta hotellen | TBCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) Service 
och HyAEN2AEB6AEBiAIBqgAIDuAKI1bWBBsAC Source . | Identifier: 
boendealternat | AdICJDc2MGNjYjg5L WZKkMjAtNDMyNS 1hM Repository Path: 
iven WVhLWYAZTQ1OTI2YjlOYtgCBeACAQ:;sid- 
cb602dccc0a7647ccb33ac1440501f9a;keep 
landing=1&sb price type-total&£overlay 
194 |Booking.com | |https://www.booking.com/index.sv.html?label | 2021-02-17 Artifact Family: | Source: Safari 
Officiell sida] |=gen173nr- 20:12:24(UTC Account: 
Basta hotellen | 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) Service 
och HyAEN2AEB6AEBIAIBGAIDuAKI1bWBBSAC Source . | Identifier: 
boendealternat | AdMICJDc2MGNjYjg5L WZKkMjAtNDMyNS 1hM Repository Path: 
iven WVhLWYAZTQ1OTI2YjlOYtgCBeACAQ:;sid- 
cb602dccc0a7647ccb33ac1440501f9a;keep 
 landing-1&sb price type-total& 
195 "Booking com | |https://www.booking.com/index.sv.html?label | 2021-02-17 Artifact Family: | Source: Safari 
Officiell sida] |=gen173nr- 20:12:27(UTC Account: 
Basta hotellen | 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) Service 
och HyAEN2AEB6AEBiAIBgAIDUAKI1bWBBsAC Source . | Identifier: 
boendealternat | AdICJDc2MGNjYjg5LWZkMjAtNDMyNS1hM Repository Path: 
iven WVhLWY4ZTQ10TI2Yjl0YtgCBeACAQ;sid= 
cb602dccc0a7647ccb33ac1440501f9a;keep 
 landing-1&sb price type-total& 
196  |Booking.com ` |https://www.booking.com/searchresults.sv.ht | 2021-02-17 Artifact Family: Source: Safari 
Hotell i Solna . ml?src-index&rows-20&error url-https?63A | 20:12:28(UTC Account: 
Boka hotell nu! |%2F%2Fwww.booking.com%2Findex.sv.htm | +1) Source Service 
o 0, Pi e 
I%3Flabel%3Dgen173nr. Repository Path: Identifier: 


1FCAEoggl46AdIM1gEaMgBiAECMAEIUAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10TI2YjI0YtgCBuACAQ%3Bsid%3Dcb602 
dccc0a7647ccb33ac1440501f9a963Bsb pric 
e type%3Dtotal%26%3B&label=gen173nr- 
1FCAE0gg146AdIM 1gEaMgBiAECmAEluAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10OTI2YjlOYtgCBuACAQ&sid-cb602dccc0a 
7647ccb33ac1440501f9a&sb-1&sb Ip=1&s 
earch form id=a6c1870414ab0085&ssne=S 
olna&ssne untouched-Solna&checkin mont 
hday=18&checkin year month=2021- 
2&checkout monthday=21&checkout year ` 
month=2021-2&checkin=2021-02- 
18&checkout=2021-02- 

21&group adults=4&group children=0&no r 
ooms-2&group adults overlay=4&group ch 
ildren overlay=0&no rooms overlay=2&lpsr 
=1&dest type=hotel&dest id=546866&ss ra 
w=Solna+fr&ss label=Quality+Hotel+Friends 
%2C+So0lna%2C+Stockholms+1%C3%A4n% 
2C+Sverige&place id lon=18.00336938937 
99&place id lat-59.372415700433&ac posi 
tion=0&ac suggestion list length=2&ac lan 
gcode-sv&search selected=true&ac size=5 
&ac click type-b&latitude-59.37241570043 
3&longitude=18.0033693893799&search pa 
geview id-a6c1870414ab0085 


24 


Bilaga k Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
9 


Hotell i i Solna . 
Boka hotell nu! 


MIPS7/WWW.DOOKINJ.COM/SEarcNreSUItS.SV.NT 
ml?src=index&rows=20&error_url=https%3A 


%2F%2Fwww.booking.com%2Findex.sv.htm 
I%3Flabel%3Dgen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10TI2YjI0YtgCBuACAQ%3Bsid%3Dcb602 
dccc0a7647ccb33ac1440501f9a963Bsb pric 
e type%3Dtotal%26%3B&label=gen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q1OTI2YjlOYtgCBuACAQ&sid-cb602dccc0a 
7647ccb33ac1440501f9a&sb-1&sb Ip=1&s 
earch form id=a6c1870414ab0085&ssne=S 
olna&ssne untouched-Solna&checkin mont 
hday=18&checkin year month=2021- 
2&checkout monthday=21&checkout year ` 
month=2021-2&checkin=2021-02- 
18&checkout=2021-02- 

21&group adults=4&group children=0&no r 
ooms-2&group adults overlay=4&group ch 
ildren overlay=0&no rooms overlay=2&lpsr 
-1&dest type-hotel&dest id=546866&ss ra 
w=Solna%20fr&ss_label=Quality%20Hotel% 
20Friends%2C%20Solna%2C%20Stockholm 
s%201%C3%A4n%2C%20Sverige&place id 
lon=18.0033693893799&place id lat=59.3 
72415700433&ac position=0&ac suggestio 
n list length=2&ac langcode-sv&search se 
lected=true&ac size=5&ac click type-b&lati 
tude=59.372415700433&longitude=18.0033 
693893799&search pageview id=a6c18704 
14ab0085 


-17 


20: 12: 29(UTC 
+1) 


Aruract Family: Source 
Account 

Source en ce 

Repository Path: | Identifier: 


198 


Booking.com : 
Hotell i Solna . 
Boka hotell nu! 


https://www.booking.com/searchresults.sv.ht 
ml?src=index&rows=20&error_url=https%3A 
%2F%2Fwww.booking.com%2Findex.sv.htm 
1%3Flabel%3Dgen173nr- 
1FCAE0gg146AdIM 1gEaMgBiAECmAEluAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZKMjAtNDMyNS 1hMWVhLWYAZT 
Q10TI2YjlI0OYtgCBuACAQ%3Bsid%3Dcb602 
dccc0a7647ccb33ac1440501f9a963Bsb pric 
e type%3Dtotal%26%3B&label=gen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10OTI2YjlOYtgCBuACAQ&sid-cb602dccc0a 
7647ccb33ac1440501f9a&sb-1&sb Ip=1&s 
earch form id=a6c1870414ab0085&ssne=S 
olna&ssne untouched-Solna&checkin mont 
hday=18&checkin year month=2021- 
2&checkout monthday=21&checkout year ` 
month=2021-2&checkin=2021-02- 
18&checkout=2021-02- 

21&group adults=4&group children=0&no r 
ooms-2&group adults overlay=4&group ch 
ildren overlay=0&no rooms overlay=2&lpsr 
-1&dest type-hotel&dest id=546866&ss ra 
w=Solna%20fr&ss_label=Quality%20Hotel% 
20Friends%2C%20Solna%2C%20Stockholm 
$%20I%C3%A4N%2C%20Sverige&place_id 
lon=18.0033693893799&place_id_lat=59.3 
72415700433&ac position=0&ac suggestio 
n list length=2&ac langcode-sv&search se 
lected=true&ac size=5&ac click type-b&lati 
tude=59.372415700433&longitude=18.0033 
693893799&search pageview id=a6c18704 
14ab0085 


2021-02-17 
20:12:35(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


199 


Quality Hotel 

Friends i Solna 
- Uppdaterade 
priser för 2021 


https://www.booking.com/hotel/se/quality- 
friends.sv.html?label=gen173nr- 
1FCAE0gg146AdIM 1gEaMgBiAECmAEluAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10TI2YjI0YtgCBuACAQ&sid=cb602dcccOa 
7647ccb33ac1440501f9a&all sr blocks=546 
86601 230913440 0 1 0%2C54686601 23 


0913440 0 1 O&checkin=2021-02- 
18&checkout=2021-02-21&dest id=- 
2522526&dest type=city&group adults=4&g 
roup children=0&hapos=1&highlighted bloc 
ks-54686601 230913440 0 1 0%2C54686 


601 230913440 0 1 O&hpos-1&no rooms 
-2&req adults=4&req children=0&room1=A 
%2CA&room2=A%2CA&sr order=popularity 
&srepoch=1613589148&srpvid=5cad870e5f 
9a0144&ucfs=1&matching block id=546866 


01 230913440 O 1 O&ref is wI=1&srhp=1 


2021-02-17 
20:12:40(UTC 
+1) 


1 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 
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06 


[Quamy Hoter | 
Friends i Solna 
— uppdaterade 
priser fór 2021 


[Https77/WWW.DOOKIng.COm/searcnresurts.sv.nt 
ml?src=index&rows=20&error_url=https%3A 


%2F %2Fwww.booking.com%2Findex.sv.htm 
I%3Flabel%3Dgen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10TI2YjI0YtgCBuACAQ%3Bsid%3Dcb602 
dccc0a7647ccb33ac1440501f9a963Bsb pric 
e type%3Dtotal%26%3B&label=gen173nr- 
1FCAE0gg146AdIM 1gEaMgBiAECmAEluAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10OTI2YjlOYtgCBuACAQ&sid-cb602dccc0a 
7647ccb33ac1440501f9a&sb=1&sb Ip=1&s 
earch form id=a6c1870414ab0085&ssne=S 
olna&ssne untouched=Solna&checkin mont 
hday=18&checkin year month=2021- 
2&checkout monthday=21&checkout year ` 
month=2021-2&checkin=2021-02- 
18&checkout=2021-02- 

21&group adults=4&group children=0&no r 
ooms-2&group adults overlay=4&group ch 
ildren overlay=0&no rooms overlay=2&lpsr 
-1&dest type-hotel&dest id=546866&ss ra 
w=Solna+fr&ss label=Quality+Hotel+Friends 
%2C+So0lna%2C+Stockholms+1%C3%A4n% 
2C+Sverige&place id lon=18.00336938937 
99&place id lat-59.372415700433&ac posi 
tion=0&ac suggestion list length=2&ac lan 
gcode-sv&search selected=true&ac size=5 
&ac click type-b&latitude-59.37241570043 
3&longitude= 18.0033693893799&search pa 
geview id-a6c1870414ab0085;highlighted ` 
hotels-546866 


-02-17 
20: 12:41(UTC 
*1) 


193 


Aruract Family: 


Source 


Repository Path: 


Feu Bata c 
ccoun 
Account HEMLI 


Identifier: 


201 


202 


Quality Hotel 

Friends i Solna 
- uppdaterade 
priser för 2021 


Quality Hotel 

Friends i Solna 
- uppdaterade 
priser för 2021 


https://www.booking.com/hotel/se/quality- 
friends.sv.html?label=gen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECMmAEIuAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10TI2YjI0YtgCBuAGAQ;sid=cb602dcccOa 
7647ccb33ac1440501f9a;all sr blocks=546 
86601 230913440 0 1 0%2C54686601 23 


0913440 0 1 O;checkin-2021-02- 
18;checkout-2021-02-21;dest id-- 
2522526; ;dest type=city; dist-0: :group adults 
=4;group_children=0;hapos=1;highlighted_bl 
ocks=54686601 230913440 0 1 0%2C546 


86601 230913440 0 1 O;hpos-i;matching 


- block id=54686601 230913440 0 1 0;no 
 rooms-2;ref is wl=1;req adults-4;req chil 
dren=0;room1 =A%2CA; room2=A%2CA: sb p 
rice type=total;sr order=popularity;srepoch= 
1613589148; :srpvid= 5cad870e5f9a0144;type 


=total;ucfs=1& 


https://www.booking.com/hotel/se/quality- 
friends.sv.html?label=gen173nr- 
1FCAE0gg146AdIM 1gEaMgBiAECmAEluAE 
HyAEN2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MG 
NjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10OTI2YjlOYtgCBuACAQ;sid-cb602dccc0a 
7647ccb33ac1440501f9a;all sr blocks=546 
86601 230913440 0 1 0%2C54686601 2283 


0913440 O 1 O;checkin=2021-02- 
18;checkout-2021-02-21;dest id=- 
2522526;dest type=city;dist=0;group adults 
=4; ;group children =0;hapos=1;highlighted bl 
ocks=54686601 230913440 0 1 0%2C546 
86601 230913440 0 1 O;hpos-1;matching 
block id=54686601 230913440 0 1 Ono 
rooms-2;ref is wiren adults-4;req chil 
dren-0;room1-A962CA;room2-A962CA;sb p 
rice type-total;sr order=popularity;srepoch= 
1613589148;srpvid=5cad870e5f9a0144;type 
=total;ucfs=1& 


2021-02-17 
20:12:41(UTC 
+1) 


2021-02-17 
20:12:45(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


203 


oslo - Sók pa 
Google 


https://www.google.se/search?q=oslo&ie=UT 
F-8&0e=UTF-8&hl=sv-se&client=safari 


2021-02-18 
00:16:05(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


204 


oslo - Sök på 
Google 


https://www.google.se/search?q=oslo&ie=UT 
F-8&0e=UTF-8&hl=sv-se&client=safari 


2021-02-18 
00:16:06(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


205 


Oslo - Google 
Maps 


https://www.google.com/maps/place/Oslo,+N 
orge/@59.3873913,17.9874414, 12z/data=!4 
m2!3m1!1s0x46416e61f267f039:0x7e92605f 
d3231e9a?hl=sv-se 


2021-02-18 
00:16:57(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


206 


Norge till 
Norge - 
Google Maps 


https://www.google.com/maps/dir/Lillestr%C 

3%B8m,+Norge/Oslo,+Norge/@59.9454311, 
10.9070776,10z/data=!4m8!4m7!1m2!1m1!1 

s0x46417b5f82bbf777:0x6021ba6f044063cd 
11m2!1m1!150x46416e61f267f039:0x7e9260 
5fd3231e9a!3e0?hl=sv-se 


2021-02-18 
00:19:22(UTC 


+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


207 


Norge till 
Norge - 
Google Maps 


https://www.google.com/maps/dir/T%C3%B8 
nsberg, tNorge/Oslo,+Norge/()59.5937976,1 
0.4595804,8z/data-!4m8!4m7!1m2!1m1!1s0 

x4646b7388d757dab:0x90ca13e6ed9f9a3f!1 

m2!1m1!1s0x46416e61f267f039:0x7e92605f 
d3231e9a!3e0?hl=sv-se 


2021-02-18 
00:34:02(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 
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08 


oslo tidszon - 
Sök pá Google 


[osio uaszon - TNUPs:7/Wwww.google.sersearcn7chent=sarari& 
Sök pa Google |channel=iphone bm&source=hp&ei=6qctYKi 


yGMn5qwHst66Y Cg&q=oslo+tidszon&oq=os 
lo+tid&gs_Icp=ChFtb2JpbGUtZ3dzLXdpei1o 
cBABGAlyAggAMgllADICCAAyAggAMgllAD 
ICCAAyAggAMgY IABAWEB46AggpOg4IKR 
CxAxDHARCjAhCTAjoLCCkQxwEQrwEQkw 
I16CwgpELEDEIMBEJMCOgglABCxAxCDAT 
olCC4QsQMQgwE6CwguELEDEMcBEKMC 
OglILjoFCAAQsQM6CwguELEDEMCBEK8B 
OgUILhCxAzoIlCCkQsQMQkwl6CAguEMcB 
EK8BOggILhCxAxCTAjoLCC4QxwEQrwEQK 
wJQ6hFYIXNg- 
oEBaAJwAHgAgAFsiAH1BZIBAZUUM5gBA 
KABAbABDwé&sclient=mobile-gws-wiz-hp 


https://www.google.se/search?client=safari& 
channel=iphone_bm&source=hp&ei=6qctY Ki 
yGMn5qwHst66Y Cg&q=oslo+tidszon&oq=os 
lo+tid&gs_Icp=ChFtb2JpbGUtZ3dzLXdpei1o 
cBABGAlyAggAMgllADICCAAyAggAMgllAD 
ICCAAyAggAMgY IABAWEB46AggpOg4IKR 
CxAxDHARCjAhCTAjoLCCkQxwEQrwEQkw 
|6CwgpELEDEIMBEJMCOggIABCxAxCDAT 
olCC4QsQMQgwE6CwguELEDEMcBEKMC 
OglILjoF CAAQsQM6CwguELEDEMcBEK8B 
OgUILhCxAzolCCkQsQMQkwI6CAguEMcB 
EK8BOggILhCxAxCTAjoLCC4QxwE QrwEQk 
wJQ6hFYIXNg- 
oEBaAJwAHgAgAFsiAH1BZIBAZUUM5gBA 
KABAbABDwé&sclient=mobile-gws-wiz-hp 


021-02-18 
00:34:21(UTC 
+1) 


2021-02-18 
00:34:25(UTC 
+1) 


T 


194 


Aruract Family: 


Source 


Repository Path: 


Artifact Family: 


Source 


Repository Path: 


Sourcer Bata E: 
ccoun 
Account HEMLI 


Identifier: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Flashback 
Forum 


https://www.flashback.org/t3305870 


2021-02-18 
04:48:34(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Sidan 12 - 
Flashback 
Forum 


https://www.flashback.org/t3305870p12 


2021-02-18 
04:48:35(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning 
Tulegatan 
Sundbyberg 16 


https://www.flashback.org/t3305870p12 


2021-02-18 
04:48:40(UTC 
+1) 


Artifact Family: 


Source: 
KnowledgeC 
Account: 


feb 2021 - Source . | Service 
Sidan 12 - Repository Path: | Identifier: 
Flashback 
Forum 
213  |Skottlossning |https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: | Source: 
Tulegatan 04:49:45(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source . | Service 
Sidan 12 - Repository Path: | Identifier: 
Flashback 
Forum 
214  |Skottlossning |https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: | Source: 
Tulegatan 05:29:10(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source . | Service 
Sidan 12 - Repository Path: | Identifier: 
Flashback 
Forum 
215  |Skottlossning |https://www.flashback.org/t3305870p12 2021-02-18 1 Artifact Family: | Source: Safari 
Tulegatan pa m eee Account 
undbyberg +1 ervice 
Source ifar 
Kan ta a5 : Repository Path: | Identifier: 
Flashback 
Forum 
216  |Skottlossning |https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: | Source: 
Tulegatan 16:33:45(UTC KnowledgeC 
Sundbyberg 16 *1) Account: 
feb 2021 - Source . | Service 
Sidan 12 - Repository bath: Identifier: 
Flashback 
Forum 
217  |Skottlossning |https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: | Source: 
Tulegatan 16:36:15(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source . | Service 
Sidan 12 - Repository Path: Identifier: 
Flashback 
Forum 
218  |Skottlossning |https://www.flashback.org/t3305870 2021-02-19 1 Artifact Family: | Source: Safari 
Sark NG 01 19 UIE Account: 
un er + rvi 
feb 2021 - 7 ) Source : identifier 
Flashback Repository Path: 
Forum 
219 |Skottlossning  |https://www.flashback.org/t3305870p2 2021-02-19 1 Artifact Family: | Source: Safari 
DE - EN Account: 
undbyberg +1 ervice 
Source far 
reb 2 2 Repository Path; | Identifier: 
Flashback 
Forum 
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[NUPS77WWW.TrasnDack.Org/133U587UPTI3 -02-19 Arüract Family: | Source 
Tulegatan 16 01:19:47(UTC Account 
undbyberg +1) Source Service 
feb e el 3 Repository Path: | Identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: | Source: 
Tulegatan 01:19:50(UTC KnowledgeC 
Sundbyberg 16 *1) S Account: 
feb 2021 - ource Service 
Sidan 13 - Repository Path: | Identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: | Source: Safari 
Tulegatan 16 01:20:01(UTC Account: 
undbyberg *1) Source Service 
jea 2 al 7 Repository Path: | Identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: | Source: 
Tulegatan 01:20:05(UTC KnowledgeC 
Sundbyberg 16 +1) s Account: 
feb 2021 - Se Service 
Sidan 12 - Repository Path: Identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: | Source: 
Tulegatan 01:41:05(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - source Service 
Sidan 12 - Repository Path: Identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: | Source: Safari 
Lulegatan na 01:41:17(UTC Account: 
undbyberg +1) Source Service 
ES = al " Repository Path; | Identifier: 
Flashback 
Forum 
Skottlossning —|https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: | Source: 
Tulegatan 01:41:20(UTC KnowledgeC 
Sundbyberg 16 +1) s Account: 
feb 2021 - ource . | Service 
Sidan 13 - Repository Path: Identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: | Source: 
Tulegatan 01:55:35(UTC KnowledgeC 
Sundbyberg 16 +1) s Account: 
feb 2021 - ource . | Service 
Sidan 13 - Repository Path: | 14entifier: 
Flashback 
Forum 
2013 Audi 88 |https://biluppgifter.se/fordon/TYK689 2021-02-19 Artifact Family: | Source: Safari 
4.0 VEN e 02:26:19(UTC Account: 
quattro, Sva +1) s Service 
519hk pa ource . | Identifier: 
Biluppgifter.se Repository Path: 
2013 Audi 88 |https://biluppgifter.se/fordon/TYK689#agare | 2021-02-19 Artifact Family: | Source: Safari 
4.0 non ti 02:26:21(UTC Account: 
quattro, Sva +1) s Service 
519hk pa ource ifier: 
Bilupp ae så Repository Path: | Identifier: 
Kim Mats Bo https://www.merinfo.se/person/Partille/Kim- | 2021-02-19 Artifact Family: Source: Safari 
Nyman Mats-Bo-Nyman-1993/bv6sp- 02:26:23(UTC Account: 
(Partille, 27 år) |4k23a?utm source=biluppgifter&utm mediu +1) Source Service 
- Merinfo.se m=owner&utm term=person Repository Path: Identifier: 
Kim Mats Bo  |https://www.merinfo.se/person/Partille/Kim- | 2021-02-19 Artifact Family: | Source: 
Nyman Mats-Bo-Nyman-1993/bv6sp- 02:26:25(UTC KnowledgeC 
(Partille, 27 år) |4k23a?utm source-biluppgifter&utm mediu +1) s Account: 
- Merinfo.se m=owner&utm term=person Reposit ory Path: Service 
* | Identifier: 
2013 Audi 88 |https://biluppgifter.se/fordon/TYK689#agare |2021-02-19 Artifact Family: | Source: 
4.0 TFSI 02:26:25(UTC KnowledgeC 
quattro, Svart / *1) S Account: 
519hk pa Ropostt Path: Service 
Biluppgifter.se epository Fath: | Identifier: 
https://www.merinfo.se/search?ae6=Nedre% | 2021-02-19 Artifact Family: | Source: Safari 
20Furuskogsv%C3%A4gen%204%20lgh%2 | 02:26:35(UTC Account: 
02202&ae4=Partille&d=p +1) Service 
Source Identifier: 
Repository Path: d 
https://www.me |https://www.merinfo.se/search?ae6=Nedre% | 2021-02-19 Artifact Family: | Source: 
rinfo.se/search |20Furuskogsv%C3%A4gen%204%20lgh%2 | 02:26:40(UTC KnowledgeC 
?ae6=Nedre% |02202&ae4=Partille&d=p +1) s Account: 
20Furuskogsvá ourc . | Service 
gen%204%20I Repository Path: | Identifier: 
gh9?6202202&a 
e4=Partille&d= 
p 
Skottlossning |https://www.flashback.org/t3305870 2021-02-19 Artifact Family: | Source: Safari 
[Ue han pa 14:11:23(UTC Account: 
undbyberg +1 Service 
feb 2021 - ) Source . | Identifier: 
Flashback Repository Path: 
Forum 
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196 


6 Srono MUPST/WWW.TlasnNbaCck.Org/133U587UPT3 021-02-19 Artiract Family: | Source: Bata e 
ulega am 14:11:24(UTC Account | HEMLIG] 
Sundbyberg 16 +1) Source Service HEMLI 
Sn Repository Path: | Identifier: 
Flashback 
Forum 
237  |Skottlossning  |https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: | Source: o 
Tulegatan 14:11:25(UTC KnowledgeC 
Sundbyberg 16 +1) Source Account: 
el - H i 
Sidan 13 - Repository Path: | enter. 
Flashback 
Forum 
238  |Skottlossning |https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: | Source: Safari D 
Tulegatan 16 14:11:48(UTC Account: 
undbyberg *1) Source Service 
Ga 2 al S Repository Path: | Identifier: 
Flashback 
Forum 
239 |Skottlossning |https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: | Source: D 
Tulegatan 14:11:50(UTC KnowledgeC 
an 16 +1) Source Account: 
el - : i 
Sidan 12 - Repository Path: "OS, 
Flashback 
Forum 
240 | Google https://translate.google.com/ 2021-02-19 Artifact Family: | Source: Safari D 
Oversatt 14:46:23(UTC Account: 
+1) Service 
Source for 
Repository Path: | Identifier: 
241 [Google https://translate.google.com/?sl=sv&tl=en&te | 2021-02-19 Artifact Family: | Source: Safari o 
Oversátt xt=grabbarna%20ska%20%C3%A5ka%20dit | 14:47:00(UTC Account: 
t%20igen%200ch%20knacka%20p%C3%A5 | +1) S Service 
%20d%C3%B6rren%200m%20han%20%C3 Banos Path: | Identifier: 
%A4r%20d%C3%A4r%20d%C3%A5%20ta SPposkory Fal; 
%20med%20honom%20&op=translate 
242 |Google https://translate.google.com/?sl-sv&tl-en&o | 2021-02-19 Artifact Family: | Source: Safari o 
Oversátt p=translate 14:48:34(UTC Account: 
+1) Service 
Source far 
Repository Path: | Identifier: 
243  |Skottlossning |https://www.flashback.org/t3305870 2021-02-19 Artifact Family: | Source: Safari D 
Tulegatan 18 16:04:23(UTC Account: 
undbyberg +1 Service 
feb 2021 - | Source . | Identifier: 
Flashback Repository Path: 
Forum 
244  |Skottlossning |https://www.flashback.org/t3305870 2021-02-19 Artifact Family: | Source: D 
Tulegatan 16:04:25(UTC Knowledge C 
Sundbyberg 16 +1) Source Account 
el - ; . | Service 
Flashback Repository Path: | Identifier: 
Forum 
245  |Skottlossning |https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: | Source: Safari o 
Lulegatan " 16:04:33(UTC Account: 
undbyberg +1) Source Service 
TED 20 al : Repository Path: | Identifier: 
Flashback 
Forum 
246  |Skottlossning |https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: | Source: o 
Tulegatan 16:04:35(UTC KnowledgeC 
Sundbyberg 16 +1) Source Account: 
e - H i 
Sidan 13- Repository Path: eon 
Flashback 
Forum 
247  |Courtyard by  |https://www.booking.com/hotel/se/courtyard- | 2021-02-20 Artifact Family: | Source: Safari D 
Marriott stockholm.sv.html?label-gen173nr- 01:19:57(UTC Account: 
Stockholm 1DCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) s Service 
Kungsholmen i | HyAENZAED6AEBIAIBqAIDuALugsGBBSAC Revost Path: | Identifier: 
Stockholm- | AdICJDg5NzdhNGJILWQzYTYtNDEOOS1iY epository Path: 
uppdaterade =| WIWLWNmZDdkNWRKYzMOM9gCBOACAQ 
priser för 2021 | ;sid=cb602dccc0a7647ccb33ac1440501f9a; 
all sr blocks=17260306 246421916 0 2 0; 
checkin=2021-02-19;checkout=2021-02- 
20;dest id=1324;dest type=district;dist=0;gr 
oup adults= =2;group_children=0;hapos=1;hig 
hlighted blocks-17260306 246421916 0 | 2 
_0:hpos=1;matching_block_id=17260306_24 
6421916 0 2 O;no_rooms=1;ref_is wl=1;ro 
om1=A%2CA;sb price type= =total: Sr i order= 
popularity;sr pri blocks= 17260306 2464219 
16 0 2 0 80300;srepoch=1613780374;srp 
vid=6fb1024af9220203;type=total;ucfs=1& 
248  |Skottlossning |https://www.flashback.org/t3305870 2021-02-20 Artifact Family: | Source: Safari o 
Tulegatan 16 15:13:59(UTC Account: 
undbyberg +1 Service 
feb 2021 - ) Source . | Identifier: 
Flashback Repository Path: 
Forum 
249  |Skottlossning |https://www.flashback.org/t3305870p13 2021-02-20 Artifact Family: | Source: Safari o 
Tulegatan 48 15:14:00(UTC Account: 
undbyberg *1) Source Service 
= E zn S Repository Path: | Identifier: 
Flashback 
Forum 
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Dps77WWW.Tasnback.org/t33U58 /'Up T3 -02-20 Arüractramiy: | Source: 
Tulegatan 1 15:14:05(UTC Knowled 
un er +1 Account 
feb 2021 - 7 ) Source . | Service 
Sidan 13 - Repository Path: Identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870p13 2021-02-20 Artifact Family: Source: 
Tulegatan 15:41:45(UTC KnowledgeC 
Sundbyberg 16 +1) Account: 
feb 2021 - Source . | Service 
Sidan 13 - Repository Path: Identifier: 
Flashback 
Forum 
STF af https://www.booking.com/hotel/se/af- 2021-02-20 1 Artifact Family: Source: Safari 
Chapman 4 chapman.sv.html?label=gen173nr- 23:07:55(UTC Account: 
Skeppsholmen | 1DCAEoggl46AdIM1gEaMgBiAECmAEIUAE | +1) Service 
i Stockholm — 7 |HyAEN2AED6AEBIAIBgAIDuALPjcaBBsAC Source . | Identifier: 
uppdaterade — | AdICJDESNTY 1MzgOLWIwODCtNDEOMyO4 Repository Path: 
priser för 2021 |N2ZhLTZiMGMyYjg2MTU2ZtgCBOACAQ&si 
d=cb602dccc0a7647ccb33ac1440501f9a&all 
Sr blocks=29772913 91471534 1 2 O&ch 
eckin=2021-02-20&checkout=2021-02- 
21&dest id=- 
2524279&dest type=city&group adults=1&g 
roup children=0&hapos=53&highlighted blo 
cks=29772913 91471534 1 2 O&hpos-13 
&no rooms-1&req adults=1&req children= 
O&room1=A&sr order-popularity&sr pri blo 
cks-29772913 91471534 1 2 0 242998s 
repoch=1613858753&srpvid=90a29b602565 
015a&ucfs=1&matching block id=29772913 
91471534 1 2 O&srhp=1&ref is wl=1 
scandic https://www.google.se/search?q=scandic+st | 2021-02-20 1 Artifact Family: Source: Safari 
stockholm - ockholm&ie=UTF-8&0e=UTF-8&hl=sv- 23:08:44(UTC Account: 
Sök pa Google |se&client=safari +1) Source Service 
Repository Path: | Identifier: 
radisson blu -  |https://www.google.se/search?q-radisson-bl | 2021-02-20 1 Artifact Family: Source: Safari 
Sök pá Google | u&ie=UTF-8&0e=UTF-8&hl=sv- 23:09:36(UTC Account: 
se&client=safari +1) Source Service 
Repository Path: | Identifier: 
First Hotel https://www.google.se/travel/hotels/first%20h | 2021-02-20 1 Artifact Family: | Source: Safari 
Kungsbron otel/entity/Cgoltqzg0uXh2uNBEAE?g2lb=25 | 23:09:55(UTC Account: 
02548,2503781 ,2503839,4258168,4306835, | +1) Service 
4308227 ,4317915,4328159,4371335,44017 Source h: | Identifier: 
69,4419364,4463666,4466980,4482194,448 Repository Path: 
2438,4486153,4491350,4495816,4496891,4 
503422,4270859,4284970&hl=sv- 
SE&gl-se&ap-aAE&grf-ErEBCiwIDhloEiZyJ 
CoiCgcl5Q8QAxgOEgcl5Q8QAxgPIAAwHk 
DKAkoHCOUPEAIYFBIKCAcoAToEOgIgARI 
PCAgoAToHQgUI8j4YAUABEgsIEygCOgW 
aAQIIARoLCBMSBwoFmgECCAEaAggOGkl 
IBxIOCgw6CgoDCNIGGgNTRUsSDgoMOgo 
KAwiaCBoDUOVLEg4KDDoKCgMI4gkaA1N 
FSxlOCgw6CgoDCKoLGgNTRUSsiAiAB&q=fi 
rst-hotel&rp-ELas4NLI4drjORCHzlIPuhoi35s 
sBEKyB6YaBoNK47gEQ2K- 
04 HtoMPMATgCQAFIA6IBCVNOb2NraG9s 
bcABA8gBAA&ictx=1&ved=2ahUKEwi1xbyd 
vfnuAhXIT8AKHQUnBQoQvS4wAHoECAM 
QHQ 
First Hotel https://www.google.se/travel/hotels/first%20h | 2021-02-20 1 Artifact Family: | Source: Safari 
Kungsbron otel/entity/CgoltqzgOuXh2uNBEAE?g2lb-25 23:10:24(UTC Account: 
02548%2C2503781%2C2503839%2C42581 | +1) Service 
68%2C4306835%2C4308227%2C4317915 Source . | Identifier: 
%2C4328159%2C4371335%2C4401769%2 Repository Path: 
C4419364%2C4463666%2C4466980%2C4 
482194%2C4482438%2C4486153%2C4491 
350%2C4495816%2C4496891%2C4503422 
%2C4270859%2C4284970&hl=sv- 
SE&gl=se&ap=aAE&q=first%20hotel&rp=EL 
as4NLl4dr¡QRCHzIPuhoi35ssBEKyB6YaBo 
NK47gEQ2K- 
04 HtoMPMAalBCVNOb2NraG9sbTgBQAFI 
Aw&ictx=1&sa=X&utm_campaign=sharing&u 
tm medium-link&utm source=htls&ts=CAE 
SABozChUSEToPbsOkcmEgU3RvY 2tob2xt 
GgASGhIUCgcl5Q8QAxgOEgcl5Q8QAxgP 
GAEyAhAAKg8KCygBSglgAToDUOVLGgA 
E-post - mahad | https://outlook.live.com/mail/0/inbox 2021-02-20 1 Artifact Family: Source: Safari 
alii - Outlook 23:31:19(UTC Account: 
*1) Source Service 
Repository Path: | Identifier: 
Skottlossning |https://www.flashback.org/t3305870 2021-02-21 1 Artifact Family: Source: Safari 
Lar 46 02:35:39(UTC Account: 
undbyberg +1 Service 
feb 2021 - Source . | Identifier: 
Flashback Repository Path: 
Forum 
Skottlossning  |https://www.flashback.org/t3305870p13 2021-02-21 1 Artifact Family: | Source: Safari 
DE M 02:35:40(UTC Account: 
ER H) Source Service 
aa Repository Path: | Identifier: 
Flashback 
Forum 
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MUPST/WWW.TlasnNDbaCck.Org/133U587UPT3 102-21 Artifact Family: | Source: 
Tulegatan 16 02:35:45(UTC Knowled 
undbyberg +1 Account 
feb 2021 - | Source Service 
Sidan 13 - Repository Path: | identifier: 
Flashback 
Forum 
Skottlossning |https://www.flashback.org/t3305870 2021-02-21 1 Artifact Family: | Source: Safari 
Mrs rk 46 03:36:19(UTC Account: 
undbyberg +1 Service 
feb 2021 - ) Source . | Identifier: 
Flashback Repository Path: 
Forum 
Skottlossning |https://www.flashback.org/t3305870 2021-02-21 Artifact Family: | Source: 
Tulegatan 03:36:20(UTC KnowledgeC 
Sundbyberg 16 +1) s Account: 
feb 2021 - ource . | Service 
Flashback Repository Path: | Identifier: 
Forum 
Skottlossning  |https://www.flashback.org/t3305870p13 2021-02-21 1 Artifact Family: | Source: Safari 
Tulegatan pa 03:36:30(UTC Account: 
undbyberg +1) Source Service 
[Bb Ge AS ` Repository Path: | Identifier: 
Flashback 
Forum 
Skottlossning  |https://www.flashback.org/t3305870p13 2021-02-21 Artifact Family: | Source: 
Tulegatan 03:36:35(UTC KnowledgeC 
Sundbyberg 16 +1) s Account: 
feb 2021 - ource . | Service 
Sidan 13 - Repository Path: | identifier: 
Flashback 
Forum 
Efterlyst 2021 | https://m.youtube.com/results?sp=mAEA&se | 2021-02-21 1 Artifact Family: | Source: Safari 
skottlyssning ` arch query=Efterlyst+2021+skottlyssning+st | 03:37:42(UTC Account: 
stundbyberg - |undbyberg +1) Source Service 
YouTube Repository Path: Identifier: 
Google https://translate.google.se/?hl=sv 2021-02-21 1 Artifact Family: | Source: Safari 
Oversátt 11:10:56(UTC Account: 
*1) Service 
Source fee 
Repository Path: | Identifier: 
Google https://translate.google.se/?hl-sv&sl-auto&tl | 2021-02-21 1 Artifact Family: | Source: Safari 
Oversatt =en&text=guys%20have%20info%20about% | 11:11:24(UTC Account: 
20he%20farah%20fick%20h%C3%B6ra%20 | +1) s Service 
att%20han%200ch%20hans%20v%C3%A4n Gegen Path: | Identifier: 
ner%20%C3%A4r%20i%20krig%20m0t%20 epository Path: 
n%C3%A5rgra%20andra%20som%20bor%2 
0i%200m%C3%Aö5rdet%20mina%20V%C3% 
A4nner%20k%C3%A4nner%20dessa%20kill 
ar%20tror%20att%20de%20kan%20ta%20fr 
am%20farah%20men%20de%20%C3%A4r 
%20inte%20100%25%20leta%20efter%20ni 
%200cks%C3%A5%200m%20mer%20info% 
20&op=translate 
Google https://translate.google.se/?hl-sv&sl-auto&tl | 2021-02-21 1 Artifact Family: | Source: Safari 
Oversátt =en&op=translate 11:18:25(UTC Account: 
+1) s Service 
ource eg: 
Repository Path: | Identifier: 
Hyra bil - Boka |https://www.hertz.se/rentacar/reservation/?g | 2021-02-23 1 Artifact Family: | Source: Safari 
hyrbil direkt pa |clid=EAlalQobChMI9MeQ8eH- 01:37:11(UTC Account: 
nåtet | Hertz 7gIVj5KyCh3PRAh9EAAYASAAEgLND D | +1) Source Service 
Biluthyrning BwE &gclsrc=aw.ds Repository Path: Identifier: 
Hyra bil - Boka |https://www.hertz.se/rentacar/reservation/?g | 2021-02-23 1 Artifact Family: | Source: Safari 
hyrbil direkt på | clid=EAlalQobChMI9MeQ8eH- 01:39:48(UTC Account: 
nätet | Hertz  |7gIVj5KyCh3PRAh9EAAYASAAEgLND D | +1) Gr Service 
Biluthyrning BwE&gclsrc-aw.ds£vehicles Repository Path: Identifier: 
Sixt - Sök pá https://www.google.se/search?client=safari& | 2021-02-23 1 Artifact Family: | Source: Safari 
Google channel-iphone bm&source-hp&ei- 040YK | 01:40:36(UTC Account: 
rvBobSkwXK1764Dg&q-sixt&gs ssp-eJzj4t | +1) S Service 
TP1TcwyTY1NFJgNGBOYPBiKc6sKAEAMy Revost Path: | Identifier: 
UE7g&oqg=six&gs Icp=ChFtb2JpbGUtZ3dzL epository Path: 
Xdpei1ocBABGAAyDgguELEDEMcBEKMCE 
JMCMggILHDHARCvATIFCC4QsQMyCAgu 
EMcBEK8BMglILjIFCAAQsQMyBQgAELED 
MgUILhCxAzoOCCkQsQMQxwEQowlQkwl6 
BQgpELEDOgUIKRCgAToCCCk6DQgpEMc 
BEKMCEEMQkwI6CwgpEMcBEK8BEJMCO 
gYIKRAWEB46CAgAELEDEIMBOg4ILhCxA 
XCDARDHARCjAjoL CCAQsQMQxwEQowl6 
CwguELEDEIMBEJMCOgIIADoLCC4QsQM 
QxwEQrwFQjRNY8BhgwCVoAHAAeACAAd 
gBiAGBBJIBBTAuMi4xmAEAoAEBSAEP&sc 
lientzmobile-gws-wiz-hp 
Offerselect https://www.sixt.se/php/reservation/offersele | 2021-02-23 Artifact Family: | Source: 
ct 01:46:20(UTC KnowledgeC 
+1) Account: 
Res en Path: | Service 
* | Identifier: 
Car Rental - https://www.europcar.com/en- 2021-02-23 1 Artifact Family: | Source: Safari 
Renta new us?gclsrc-aw.ds&gclid-EAlalQobChMIqNysi | 03:13:55(UTC Account: 
Car 8 Van Pf- +1) s Service 
Worldwide | | 7gIVC9WyCh1yEwSQEAAYASAAEgJJcvD_ Repository Path: | Identifier: 
Europcar BwE&gclsrc=aw.ds epository Path: 
Select extras | | https://m.europcar.com/action/addExtras 2021-02-23 1 Artifact Family: | Source: Safari 
Europcar 03:22:42(UTC Account: 
+1) s Service 
ource er 
Repository Path: | Identifier: 
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Hyra Gi 
Snabbt pa 
Natet - Hyrbil 
till ett Bra Pris 
— Avis 


nttps7WWW.avis.Se/ ?KpId-site- 

google camp-1848901830 adgroup- 
69500277533 target-aud- 
531416943069:kwd-13402896 creative- 
346475790704 device-m feed- 
&gclid-EAlalQobChMIx4WTrvz- 


7glVw9myCh11egIcEAAYASAAEgJsr D Bw 
E 


-02-23 
03:35:37(UTC 
*1) 


Aruract Family: 


Source 


Repository Path: 


Identifier: 


Tillgángliga 
fordon 


https://secure.avis.se/car- 
results?vehicleCategory=default&exclusiveS 
earch-&fccFallBackAwdCode-&fccRecg- &fr 
omSRP=&require-mobile- 
logout=&partnerBrand=&locationBrand=avis 
&dropLocationBrand=&budgetPickupLocCod 
e-&budgetDropoffLocCode-&hire- 
country-GB&hire- 
search=Stockholm+Bromma+flygplats+- 
+SWE&hire-location=BMA&station- 
type=airport&date- 
from=23%2F02%2F2021&time- 
from=1500&time-from-hours=15&time-from- 
minutes=00&return-search=&return- 
location=&return-station-type=airport&date- 
to=28%2F02%2F2021&time-to=1500&time- 
to-hours=15&time-to- 
minutes=00&hideAwdNumber=false&loactio 
nRemarkList=&hideAwdCodeAndMessage=f 
alse&yds- 
applicable=1&dd=&yy=&mm=&awdcode=&re 
ntalPeriod=5&driverDob=&isUasorSds= 


2021-02-23 
03:36:45(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Booking.com : 
Hotell i 
Karlstad . Boka 
hotell nu! 


https://www.booking.com/searchresults.sv.ht 
ml?src=index&rows=20&error_url=https%3A 
%2F%2Fwww.booking.com%2Findex.sv.htm 
I%3Flabel%3Dgen173nr- 
1DCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AED6AEBiAIBgAIDuAKI6t2BBsACA 
dICJDJjNj|QZMTEyLTIkYWUtNDYzOC1iMDI 
mLTU3Y2EzOWZjNmMANtgCBOACAQ963B 
sid%3Dcb602dccc0a7647ccb33ac1440501f 
9a%3Bsb_price_type%3Dtotal%26%3B&lab 
el=gen173nr- 
1DCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AED6AEBiAIBgAIDuAKI6t2BBsACA 
dICJDJJNJQZMTEyLTIKYWUINDYZOC1iMDI 
mLTU3Y2EZOWZjNmM4NtgCBOACAQ8ssid 
=cb602dccc0a7647ccb33ac1440501f9a&sb 
-1&sb Ip=1&search form id=cec84653387 
b0036&checkin monthday=25&checkin yea 
r month=2021- 

2&checkout monthday=26&checkout year ` 
month=2021-2&checkin=2021-02- 
25&checkout=2021-02- 

268group adults=4&group children=0&no r 
ooms-2&group adults overlay=4&group ch 
ildren overlay=0&no rooms overlay=2&lpsr 
=1&dest type=city&dest id=- 

2493635&ss raw=kar&ss label=Karlstad%2 
C+V%C3%AA4rmland%2C+Sverige&place id 
 lon213.500731&place id lat=59.379671&a 
C position=0&ac suggestion list length=5& 
ac langcode=sv&search selected=true&ac 
size=5&ac click type=bålatitude=59.379671 
&longitude=13.500731&search pageview id 
=cec84653387b0036 


2021-02-25 


11:00:47(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Best Western 
Gustaf Froding 
Hotel 8 
Konferens i 
Karlstad — 
uppdaterade 
priser för 2021 


https://www.booking.com/hotel/se/best- 
western-gustaf-froding-hotell- 
konferens.sv.html?label=gen173nr- 
1DCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AED6AEBIAIBGAIDuAKI6t2BBSACA 
dICJDJjNjOzMTEyLTIKYWUtNDYzOC1iMDI 
mLTU3Y2EZOWZjNmM4NtgCBOACAQ;sid= 
cb602dccc0a7647ccb33ac1440501f9a;all sr 
blocks=1843619 264821228 2 1 0%2C1 


843619 264821228 2 1 O;checkin=2021- 
02-25;checkout=2021-02-26;dest id=- 
2493635:dest type=city;dist=0;group adults 
=4;group children=0;hapos=4;highlighted bl 
ocks=1843619 264821228 2 1 0%2C1843 
619 264821228 2 1 O;hpos-4;matching bl 
ock id=1843619 264821228 2 1 O:no roo 
ms=2;ref is wiiren adults-4;req children 
70; roomT: =A%2CA;room2=A%2CA;sb_price 
_type=total;sr_order=popularity;srepoch=161 
4247247; :srpvidz a9644667bb1b0080;type=to 


tal;ucfs=1& 


2021-02-25 
11:01:20(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Bekråftelse - 
Booking.com 


https://secure.booking.com/confirmation.sv.h 
tml?label=gen1 73nr- 
1DCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEDGAEBIAIBqAIDuAKIGt2BBsACA 
dICJDJjNjOzMTEyL TIFYWUtNDYzOC1iMDI 
mLTU3Y2EzOWZjNmMANtgCBOACAQ:;sid- 
cb602dccc0a7647ccb33ac1440501f9a;auth ` 
key=rZPn3J4Y3F3AgQn2;bp travel purpose 
=leisure;hostname=www.booking.com;sourc 
e=book;ua_created=0& 


2021-02-25 
11:06:42(UTC 
+1) 


Artifact Family: 


Source 


Repository Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Bekräftelse : 
Booking.com 


https://secure.booking.com/confirmation.sv.h 
tml?label=gen173nr- 
1DCAEoggl46AdIM1gEaMgBiAECmAEIUAE 
HyAEN2AEDGAEBIAIBqAIDuAKIGt2BBsACA 
dICJDJjNjOzMTEyL TIYWUtNDYzOC1iMDI 
mLTU3Y2EzOWZjNmMANtgCBOACAQ:;sid- 
cb602dccc0a7647ccb33ac1440501f9a;auth ` 
key=rZPn3J4Y3F3AgQn2;bp travel purpose 
=leisure;hostname=www.booking.com;sourc 
e-book;ua created-0& 


2021-02-25 
11:06:50(UTC 
*1) 


Artifact Family: 


Source 


Repository Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


32 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Data Files (1) 


Documents (1) 


11BEBE49-2BDF-4872-8D8B- 
8CA0A6TAF690.pdf 
373fd2e35eced361b8ff2ca4a54ab4207f 
a93345_files_full.zip/private/var/mobile/ 
Containers/Data/Application/06B4B7A0- 
A991-4F2E-B94A- 
D6285790191B/tmp/11BEBE49-2BDF- 
4872-8D8B-8CA0A61AF690.pdf 


fde4b53024c5eba28216eebe8931e2f7 


Size (bytes): 
Created: 
Modified: 
Accessed: 


200720 


2021-02-18 16:34:10(UTC+1) 
2021-02-18 16:34:10(UTC+1) 
2021-02-18 16:34:10(UTC+1) 


2023-10-06 


09:52:36 


2023-10-06 
09:52:36 


From: 2020-02-17 00:00:00 |Missed Source: Facebook Messenger 
100046341096779 11:29:33(UTC+1) Account: 1517356926 
Patric Malko 
To: 
1517356926 
Pontus Biscaard 
Direction: 
Incoming 

2 Call Log Evidence 2023-10-06 2023-10-06 

09:52:38 09:52:38 = 


From: 
We 49 
Valentina * 
Direction: 


Incoming 


2021-02-13 Answered 


00:34:18(UTC+1) 


Unknown 
network 
(Sweden)* 


Source: FaceTime 


2023-10-06 
09:52:39 


2023-10-06 
09:52:39 


From: 2021-02-13 00:49:08 | Answered | se Network Yes | Source: FaceTime Yes 
+19 00:44:50(UTC+1) Name: 
Valentina * Unknown 
EP CAE network 
bana (Sweden) 
4 Call Log Evidence 2023-10-06 2023-10-06 
09:52:39 09:52:39 = 


To: 2021-02-13 00:01:20 |Answered |se Network Yes | Source: FaceTime Yes 
+46 ` ` 4 0 01:35:54(UTC+1) Name: 
Valentina * Unknown 
Direction: no x 
Outgoing (Sweden) 
5 Call Log Evidence 2023-10-06 2023-10-06 
09:52:40 09:52:40 ^ 


rom: 2021-02-13 00:26:52 |Answered |se Network Yes | Source: FaceTime Yes 
E O 01:39:43(UTC+1) Name: 
Valentina * Unknown 
eps bak] network 
paka (Sweden)* 
6 Call Log Evidence 2023-10-06 2023-10-06 
09:52:45 09:52:45 a 


| Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 201 
Fro 2021-02-15 UU:UU:UU d Yes Source: WhatsApp 
4679022366205. whats | 13:27:21(UTC+1) answere Account: 46790223662@s.whats PPEEMLIG | 
a GE MI IC 
Nabas 
252615192542@s.what 
sapp.net 
Direction: 
Outgoing 
7 Call Log Evidence 2023-10-06 2023-10-06 
09:52:48 09:52:48 = 
From: 2021-02-15 00:00:00 |Not Yes | Source: WhatsApp 
46790223662(Qs.whats | 13:27:52(UTC+1) answered Account: 46790223662@s.whatsapp.net 
app.net 
Mahad 
To: 
252615245172@s.what 
sapp.net 
Direction: 
Outgoing 
8 Call Log Evidence 2023-10-06 2023-10-06 
09:52:48 09:52:48 = 
From: 2021-02-16 00:21:24 | Answered |se Network Yes | Source: FaceTime Yes 
+46704336449 00:31:12(UTC+1) Name: 
Valentina * Unknown 
ra network 
Miser (Sweden)* 
9 Call Log Evidence 2023-10-06 2023-10-06 
09:52:49 09:52:49 = 
From: 2021-02-16 00:00:00 |Not Yes | Source: WhatsApp 
46790223662@s.whats | 14:01:58(UTC+1) answered Account: 46790223662@s.whatsapp.net 
app.net 
Mahad 
To: 
252615192542@s.what 
sapp.net 
Direction: 
Outgoing 
10  |Call Log Evidence 2023-10-06 2023-10-06 
09:52:49 09:52:49 a 


: 2021-02-16 00:06:51 |Answered Source: WhatsApp 
46790223662@s.whats | 14:02:12(UTC+1) Account: 4679072366205. whatsapp.net 
app.net 
Mahad 
To: 
252615192542@s.what 
sapp.net 
Direction: 
Outgoing 
11  |Call Log Evidence 2023-10-06 2023-10-06 
09:52:51 09:52:51 a 


From: 
252615192542@s.what 
sapp. net 


To: 
467902236620. whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-17 
16:52:39(UTC+1) 


00:00:00 | Missed 


Source: WhatsA 


Account: 46790223662@s.whatsapp.net 


12  |Call Log 


Evidence 


2023-10-06 
09:52:52 


2023-10-06 
09:52:52 


From: 2021-02-17 00:00:00 |Not Source: WhatsApp 
46790223662(Qs.whats | 17:07:29(UTC+1) answered Account: 46790223662@s.whatsapp.net 
app.net 
Mahad 
To: 
252615192542@s.what 
sapp.net 
Direction: 
Outgoing 
13  |Call Log Evidence 2023-10-06 2023-10-06 
09:52:53 09:52:53 = 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


202 


From: 
ACT 7 4@s.whats 
app.net 

les secrets de la vie 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-18 
12:51:56(UTC+1) 


00:00:00 |Missed 


Source: WhatsApp 
Account: 46790223662@s.whatsapp.net 


14  |Call Log 


Evidence 


2023-10-06 
09:53:32 


2023-10-06 
09:53:32 


| PI 


From: 

46790223662 (9s.whats 
app.net 

Wales 


SITIOS. whats 


app.net 
les secrets de la vie 


Direction: 
Outgoing 


2021-02-18 
14:05:14(UTC+1) 


00:00:00 |Rejected 


Source: WhatsApp 
Account: 46790223662@s.whatsapp.net 


15  |Call Log 


Evidence 


2023-10-06 
09:53:34 


2023-10-06 
09:53:34 


From: 

HS ` ` 7 4@s.whats 
app net 

E secrets de la vie 


4679022366205. whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-18 
14:13:37(UTC+1) 


00:02:15 |Answered 


Source: WhatsApp 


pp 
Account: 46790223662@s.whatsapp.net 


16  |Call Log 


Evidence 


2023-10-06 
09:53:36 


2023-10-06 
09:53:36 


: 2021-02-18 00:00:54 | Answered |se Network Yes | Source: FaceTime 
0708922241 15:02:21(UTC+1) Name: 
Mamma* Unknown 
Direction: network * 
Outgoing (Sweden) 
17  |Call Log Evidence 2023-10-06 2023-10-06 
09:53:37 09:53:37 a 


Ey ` 7 4@s.whats 


app.net 
ES secrets de la vie 


4679022366205, whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-18 
16:55:22(UTC+1) 


00:00:00 |Missed 


Source: WhatsA 


Account: 46790223662@s.whatsapp.net 


18  |Call Log 


Evidence 


2023-10-06 
09:53:38 


2023-10-06 
09:53:38 


¿67M 40 @s.whats 
app.net 
als 


4079022060205 whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-19 
02:59:41(UTC+1) 


00:00:00 |Missed 


Source: WhatsA| 


Account: 46790223662@s.whatsapp.net 


Yes 


19  |Call Log 


Evidence 


2023-10-06 
09:53:38 


2023-10-06 
09:53:38 


| P 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 203 


46/90223662Qs whats. | 02:59:45(UTC1) = Account: E wh 7 
LA s.whats :59:45 br ccount: 467 s.whatgap LIG | 
cm IG 
Mahad 
To: 
Hen ` 94905 whats 
app.net 
Valentina 
Direction: 
Outgoing 
20  |CallLog Evidence 2023-10-06 2023-10-06 
09:53:39 09:53:39 e 
From: 2021-02-19 00:08:56 | Answered Source: WhatsApp 
10A 9@s.whats | 03:00:01(UTC 1) Account: 46790223662@s.whatsapp.net 
app.net 
Valentina 
To: 
46790223662@s.whats 
app.net 
Mahad 
Direction: 
Incoming 
21 Call Log Evidence 2023-10-06 2023-10-06 
09:53:39 09:53:39 = 


From: 2021-02-19 00:00:00 |Not Source: WhatsApp 
46790223662@s.whats | 04:01:21(UTC+1) answered Account: 46790223662@s.whatsapp.net 
app.net 
Mahad 


To: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2023-10-06 2023-10-06 
09:53:40 09:53:40 


From: 2021-02-19 00:00:58 | Answered Source: WhatsApp 
10 E74 @s.whats | 13:32:25(UTC+1) Account: 46790223662@s.whatsapp.net 
app.net 
les secrets de la vie 
To: 
46790223662@s.whats 
app.net 
Mahad 
Direction: 
Incoming 
23  |Call Log Evidence 2023-10-06 2023-10-06 
09:53:42 09:53:42 o 
From: 2021-02-19 00:00:00 |Missed Source: WhatsApp Yes 
10 S@s.whats | 20:14:46(UTC+1) Account: 46790223662@s.whatsapp.net 
app.net 
Valentina 
To: 
46790223662@s.whats 
app.net 
Mahad 
Direction: 
Incoming 
24 |Call Log Evidence 2023-10-06 2023-10-06 
09:53:43 09:53:43 a 
From: 2021-02-19 00:00:00 |Rejected Source: WhatsApp Yes 
46790223662(Qs.whats | 20:22:25(UTC+1) Account: 46790223662(Qs.whatsapp.net 
app.net 
Manag 
HA whats 
app.net 
Valentina 
Direction: 
Outgoing 
25  |Call Log Evidence 2023-10-06 2023-10-06 
09:53:43 09:53:43 + 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


From: 
10-8905 whats 
app.net 

Valentina 


0: 
46790223662@s.whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-19 
20:27:33(UTC+1) 


204 


UU:U3:38 


Source: WhatsApp 


Account: 46790223662 (9s.what: 


CHEMLIG | 


26  |CallLog 


Evidence 


2023-10-06 
09:53:44 


2023-10-06 
09:53:44 + 


From: 


1000 9 @s. whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-19 
23:00:07(UTC+1) 


00:00:00 | Missed 


Source: WhatsA 


Account: 46790223662@s.whatsapp.net 


Yes 


27  |Call Log 


Evidence 


2023-10-06 
09:53:45 


2023-10-06 
09:53:45 = 


rom: 
46790223662@s.whats 
app.net 
Mahad 


To: 

Hen M / 0 @s.whats 
app.net 

Valentina 

Direction: 

Outgoing 


2021-02-19 
23:00:47(UTC+1) 


00:10:30 |Answered 


Yes 


Source: WhatsA 


Account: 46790223662@s.whatsapp.net 


Yes 


28 |Call Log 


Evidence 


2023-10-06 
09:53:45 


2023-10-06 
09:53:45 = 


From: 

HS — 49 @s.whats 
app.net 

Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-19 
23:11:24(UTC+1) 


00:13:42 |Answered 


Source: WhatsA 


Account: 46790223662@s.whatsapp.net 


Yes 


29  |Call Log 


Evidence 


2023-10-06 
09:53:45 


2023-10-06 
09:53:45 5 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
4601 490 s.whats 
app.net 

Valentina 

Direction: 

Outgoing 


2021-02-19 
23:58:52(UTC+1) 


00:19:28 |Answered 


Source: WhatsA 


Account: 46790223662@s.whatsapp.net 


Yes 


30  |Call Log 


Evidence 


2023-10-06 
09:53:48 


2023-10-06 
09:53:48 £ 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
252615192542@s.what 
sapp.net 


Direction: 
Outgoing 


2021-02-20 
01:45:11(UTC+1) 


00:00:00 |Not 
answered 


Source: WhatsApp 


Account: 46790223662@s.whatsapp.net 


31 Call Log 


Evidence 


2023-10-06 
09:53:55 


2023-10-06 
09:53:55 = 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
1072994905 whats 
app.net 

Valentina 

Direction: 

Outgoing 


2021-02-20 
02:13:43(UTC+1) 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


205 


UU:ZY:37 


Source: WhatsApp 


pp 
Account: 46790223662@s.what: 


CHEMLIG | 


32  |Call Log 


Evidence 


2023-10-06 
09:53:57 


2023-10-06 
09:53:57 


| P 


From: 


HS ` ` 7 4 @s.whats 
app.net 
les secrets de la vie 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-20 
14:50:10(UTC+1) 


00:22:06 |Answered 


Source: WhatsA 


Account: 46790223662@s.whatsapp.net 


33  |Call Log 


Evidence 


2023-10-06 
09:54:00 


2023-10-06 
09:54:00 


From: 
252615192542@s.what 
sapp. net 


To: 
467902236620. whats 
app.net 
Mahad 


Direction: 
Incoming 


2021-02-20 
17:18:33(UTC+1) 


00:00:00 |Missed 


Source: WhatsApp 


Account: 46790223662@s.whatsapp.net 


2023-10-06 
09:54:55 


2023-10-06 
09:54:55 


From: 2021-02-21 05:26:20 |Answered |se Network Source: FaceTime 
+46 [73 04:35:39(UTC+1) Name: 
+46 TESI Unknown 
AEE network 
ep (Sweden)* 
35  |Call Log Evidence 2023-10-06 2023-10-06 
09:54:57 09:54:57 a 


46790223662@s.whats 
app.net 
Mahad 


To: 

Hen ` 0 @s.whats 
app.net 

Valentina 

Direction: 

Outgoing 


2021-02-21 
14:00:28(UTC+1) 


00:11:14 |Answered 


Source: WhatsApp 


Account: 4679022366205. whatsapp.net 


36 |Call Log 


Evidence 


2023-10-06 
09:54:57 


2023-10-06 
09:54:57 


¿67M 9@s. whats 
app.net 
valentina 


4679022366205, whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-21 
19:26:46(UTC+1) 


00:05:12 |Answered 


Source: WhatsApp 


Account: 4679022366205. whatsapp.net 


37 


2023-10-06 
09:54:58 


2023-10-06 
09:54:58 


To: 
f5b5c135-837d-52b2- 
9e84-bfc8883d4ddd 
Huskooo 


Direction: 
Outgoing 


2021-02-21 
20:24:16(UTC+1) 


00:00:24 |Answered 


Source: Snapchat 


Tall Log Evidence ZUZ3-TU-UG e 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
38 = 
09:54:59 


To: 2021-02-21 00:00:20 |Answered 
f5b5c135-837d-52b2- 20:25:10(UTC+1) 


9e84-bfc8883d4ddd 


Source: Snapchat 


Huskooo 
Direction: 
Outgoing 
39  |CallLog Evidence 2023-10-06 2023-10-06 
09:55:05 09:55:05 = 
From: 2021-02-21 00:00:09 |Answered Source: Snapchat 


f5b5c135-837d-52b2- 20:41:07(UTC+1) 
9e84-bfc8883d4ddd 


Huskooo 
Direction: 
Incoming 
40 Cell Log Evidence 2023-10-06 2023-10-06 
09:55:06 09:55:06 = 
From: 2021-02-21 00:00:10 |Answered Source: Snapchat 
8766d802-47ac-5833- 20:58:44(UTC+1) 
8c9a-37c360670914 
Mike Milton 
Direction: 
Incoming 
41 Call Log Evidence 2023-10-06 2023-10-06 
09:57:06 09:57:06 + 


From: 2021-02-22 00:00:00 | Missed Source: WhatsApp 
467 4@s.wnats | 13:16:06(UTC+1) Account: 46790223662@s.whatsapp.net 
app.net 

les secrets de la vie 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


2023-10-06 2023-10-06 
09:57:11 09:57:11 


From: 2021-02-22 Answered Source: WhatsApp 
10 NA 9 2s. whats | 16:16:52(UTC+1) Account: 46790223662@s.whatsapp.net 
app.net 

Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


Call Log Evidence 2023-10-06 2023-10-06 
09:57:15 09:57:15 = 


2021-02-22 00:00:03 |Answered Network 


To: 
0708922241 


17:29:48(UTC+1) Name: 
Mamma* Unknown 
He network 
Direction: (Sweden)* 


Outgoing 


44 |Call Log Evidence 2023-10-06 2023-10-06 
09:57:19 09:57:19 a 
From: 2021-02-22 00:00:00 |Missed se Network 
0708922241 18:40:10(UTC+1) Name: 
Mamma* Unknown 
iracton: network 
pakana (Sweden) 


2023-10-06 2023-10-06 
09:57:39 09:57:39 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


From: 
10894905. whats 
app.net 

ads 


4679022366205, whats 
app.net 
Mahad 


Direction: 
Incoming 


7021-02-23 
12:36:50(UTC+1) 


207 


| 


Source: WhatsApp 
Account: 46790223662@s.whats 


46  |Call Log 


Evidence 


2023-10-06 
09:57:41 


2023-10-06 
09:57:41 H 


From: 


E — / 0 @s.whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-23 
12:36:54(UTC+1) 


00:00:00 |Missed 


Yes 


Source: WhatsApp 
Account: 46790223662@s.whatsapp.net 


47 (Call Log 


Evidence 


2023-10-06 
09:57:43 


2023-10-06 
09:57:43 


| à 


From: 

Hen ` / 4@s.whats 
app.net 

les secrets de la vie 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-23 
12:40:00(UTC+1) 


00:18:23 |Answered 


Source: WhatsApp 
Account: 46790223662@s.whatsapp.net 


48  |Call Log 


Evidence 


2023-10-06 
09:58:00 


2023-10-06 
09:58:00 


| a 


To: 
0708922241 
Mamma* 


Direction: 
Outgoing 


2021-02-23 
13:24:38(UTC+1) 


00:04:34 |Answered |se Network 
Name: 
Unknown 
network 


(Sweden)* 


Source: Yes 


49  |Call Log 


Evidence 


2023-10-06 
09:58:10 


2023-10-06 
09:58:10 


From: 

46790223662 (gs.whats 
app.net 

Mahad 


To: 

HEH — — 490 s.whats 
app.net 

Valentina 

Direction: 

Outgoing 


2021-02-23 
14:31:35(UTC+1) 


00:02:56 |Answered 


Yes 


Source: WhatsA\ 
Account: 46790223662@s.whatsapp.net 


50  |Call Log 


Evidence 


2023-10-06 
09:58:22 


2023-10-06 
09:58:22 


| P 


16 "EN @s.whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 


Direction: 
Incoming 


2021-02-23 
16:59:25(UTC+1) 


00:01:26 |Answered 


Source: WhatsApp 
Account: 4679022366205. whatsapp.net 


51 Call Log 


Evidence 


2023-10-06 
09:58:27 


2023-10-06 
09:58:27 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 
1072899905 whats 
app.net 

Valentina 

Direction: 

Outgoing 


2021-02-23 
17:26:28(UTC+1) 


208 


I 


Source: WhatsApp 
Account: 46790223662@s.whats 


52 |Call Log 


Evidence 


2023-10-06 2023-10-06 
09:58:30 09:58:30 e 


From: 


1/0/2894 9 @s.whats 
app.net 
Valentina 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-23 
17:36:49(UTC+1) 


00:04:32 |Answered 


Yes 


Source: WhatsApp 
Account: 46790223662@s.whatsapp.net 


53  |Call Log 


Evidence 


2023-10-06 2023-10-06 
09:58:38 09:58:38 = 


From: 

Hen ` ` / 91 @s.whats 
app.net 

*46 7| 


To: 
46790223662@s.whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-23 
18:01:51(UTC+1) 


00:00:41 |Answered 


Source: WhatsApp 
Account: 46790223662@s.whatsapp.net 


54  |Call Log 


Evidence 


09:59:18 09:59:18 


2023-10-06 2023-10-06 | 


From: 
46790223662@s.whats 
app.net 

Mahad 


To: 

Eo — | @s.whats 
app.net 

+46 79 049 97 91 


Direction: 
Outgoing 


2021-02-23 
18:02:44(UTC+1) 


00:01:25 |Answered 


Source: WhatsApp 
Account: 46790223662@s.whatsapp.net 


55  |Call Log 


Evidence 


2023-10-06 2023-10-06 
09:59:23 09:59:23 = 


From: 


467M 7@s.whats 
anp net 


4679022366205. whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-23 
19:44:54(UTC+1) 


00:01:45 |Answered 


Source: WhatsA 
Account: 46790223662@s.whatsapp.net 


56 "Cal Log 


Evidence 


2023-10-06 2023-10-06 
09:59:52 09:59:52 a 


¿67M @s.whats 
app.net 
ve 


4679022366205. whats 
app.net 

Mahad 

Direction: 

Incoming 


2021-02-23 
20:33:06(UTC+1) 


00:00:00 |Missed 


Source: WhatsApp 
Account: 4679022366205. whatsapp.net 


57  |Call Log 


Evidence 


2023-10-06 2023-10-06 
09:59:54 09:59:54 + 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


209 


467902230020 hats |20 SSB UTC 1) SC er oe h 
LA s.whats :34: hr ccount: 467 s.whatgap LIG | 
cm IG 
Mahad 
To: 
4674 9 @s. whats 
app.net 
Valentina 
Direction: 
Outgoing 
58 "Cell Log Evidence 2023-10-06 2023-10-06 
10:00:03 10:00:03 e 
To: 2021-02-24 00:00:00 [Not se Network Source: Yes 
0708922241 15:52:35(UTC+1) answered Name: 
Mamma* Unknown 
OR network 
Se (Sweden)* 
59 "Cal Log Evidence 2023-10-06 2023-10-06 
10:00:04 10:00:04 a 
From: 2021-02-24 00:01:02 |Answered |se Network Source: Yes 
0708922241 15:52:53(UTC+1) Name: 
Mamma* Unknown 
TM network 
Get (Sweden)* 
60 "Cell Log Evidence 2023-10-06 2023-10-06 
10:00:35 10:00:35 a 
From: 2021-02-25 00:00:00 |Missed |se Network Source: 
0708922241 14:31:32(UTC+1) Name: 
Mamma* Unknown 
Direction: NE Gn * 
Incoming (Sweden) 
61 Call Log Evidence 2023-10-06 2023-10-06 
10:00:37 10:00:37 + 


From: 2021-02-25 00:00:00 |Missed |se Network Source: 
oyd ` H 22:02:20(UTC+1) Name: 
Valentina * Unknown 
MIA network 
miss (Sweden)* 
62  |CallLog Evidence 2023-10-06 2023-10-06 
10:00:38 10:00:38 a 


Valentina “ 


Direction: 
Incoming 


2021-02-25 
22:02:42(UTC+1) 


00:00:00 |Missed 


Unknown 
network 
(Sweden)* 


Call Log 


Evidence 


2023-10-06 
10:00:39 


2023-10-06 
10:00:39 


Valentina * 


Direction: 
Incoming 


2021-02-25 
22:02:57(UTC+1) 


00:00:00 |Missed 


Unknown 
network 
(Sweden)* 


2023-10-06 
10:00:45 


2023-10-06 
10:00:45 


From: 

E — / 4@s.whats 
app.net 

les secrets de la vie 


O: 
46790223662@s.whats 
app.net 
Mahad 
Direction: 

Incoming 


2021-02-26 
14:08:33(UTC+1) 


00:00:00 |Missed 


Source: WhatsApp 


Account: 46790223662@s.whatsapp.net 


65  |Call Log 


Evidence 


2023-10-06 
10:00:47 


2023-10-06 
10:00:47 = 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 210 


From: 2021-02-26 00:00:00 |Missed |se Network Source: 
Wé ` 49 15:19:55(UTC+1) Name: 
Valentina * Unknown 
AER network 
sp (Sweden)* 
66  |Contacts Evidence 2023-10-06 2023-10-06 
10:53:01 10:53:01 - 


Group: friends Username mahadmose 


Name: Mahadmose User ID: 
Source: Snapchat 


2023-10-06 2023-10-06 


10:53:25 10:53:25 
Name: Mamma User ID: 
Source: WhatsApp Id EOCBEC65-53BD-41D2- 
Account: A588- 
46790223662@s.wh 0327229C0BB4:ABPerson 
atsapp.net WhatsApp User ld 


46709394713@s.whatsapp.n 
et 


Phone: 
Home 446709394713 


Contacts Evidence 2023-10-06 2023-10-06 
10:53:26 10:53:26 
Name: Mamma Phone: 
Source: Recents +46708922241 
Contacts Evidence 2023-10-06 2023-10-06 
10:53:28 10:53:28 
Name: Mamma Created: User ID: 
2021-02-12 User ID EOCBEC65-53BD- 
23:47:30(UTC+1) 41D2-A588- 
0327229C0BB4:ABPerson 
Modified: 
2021-02-12 Phone: 
23:47:30(UTC+1) Home +46709394713 
Contacts Evidence 2023-10-06 2023-10-06 
10:53:29 10:53:29 
Name: Mamma Created: InteractionC: incoming 
2021-02-18 ve ID: CCC77607-0E41- interaction count: 1 
14:52:48(UTC+1) 4712-8E21- InteractionC: incoming 
E88C235BC482:ABPerson interaction count: 5 
Modified: Identifier +46708922241 InteractionC: outgoing 
2021-02-18 interaction count: 5 
14:52:50(UTC+1) Phone: 
Home 0708922241 


71 |Contacts Evidence 2023-10-06 2023-10-06 
10:56:55 10:56:55 


Name: taxijakt Created: User ID: InteractionC: incoming 
Source: InteractionC |2021-02-13 Identifier +4682945258 interaction count: 2 
10:08:56(UTC+1) 
2023-10-06 2023-10-06 
10:57:29 10:57:29 
Name: Valentina User ID About: Busy. 
Source: WhatsApp Id A2BASO34- E50E-4D41- 
Account: 995D-05A839046DA8 
46790223662Qs.wh WhatsApp User Id 
atsapp.net 46704336449(Qs.whatsapp.n 
Photos: et 
467] 9- Push Name V 
1596298864.jpg 
Phone: 
Home +40 o 


10:57:30 10:57:30 


Name: Valentina Phon 
Source: Recents m 


74 [Contacts Evidence 2023-10-06 2023-10-06 
10:57:31 10:57:31 + 


Contacts Evidence 2023-10-06 2023-10-06 ES 


43 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Name: Valentina Created: User ID: InteractionC: incoming 

2021-02-17 User ID A2BA5034-E50E- interaction count: 6 

00:47:24(UTC+1) 4D41-995D-05A839046DA8 InteractionC: incoming 

interaction count: 17 

Modified: Phone: InteractionC: outgoing 

2021-02-17 Home +467 o interaction count: 117 

00:47:24(UTC+1) 

User Accounts Evidence 2023-1 0-06 2023-1 0-06 

Creation time Account 
2021-02-12 Description: 
19:41:54(UTC+1) iCloud 


Username: 


Po nln d @hotmail.com 


Service Type: 127B225E-BD1 1- 
4F92-8B8E-D9FB6F76198A 


Source: Accounts 


User Accounts Evidence 2023-10-06 2072371 0-06 
11:13:54 11:13:54 
Creation time Account 
2021-02-12 Description: 
19:41:49(UTC+1) Device Locator 


Username: 


pel ? @hotmail. com 


Service Type: D581A404-FE94- 
4D08-B346-B1FDFDDB3B28 


Source: Accounts 


User Accounts Evidence 2023-10-06 2023-10-06 
11:13:55 11:13:55 
Creation time Account 
2021-02-12 Description: 
19:41:54(UTC+1) IDMS 
Username: 


po and O hotmail.com 


Service Type: 02464211-FB70- 
4808-BOA7-ACF6A2DB3AED 


Source: Accounts 


User Accounts Evidence 2023-10-06 2023-10-06 
11:14:10 11:14:10 
Creation time Account 
2021-02-12 Description: 
19:41:55(UTC+1) Apple ID 
Username: 


MN and hotmail.com 


Service Type: D83321D7-ABAA- 
4C9C-A534-E66312D63A13 


Source: Accounts 


User Accounts Evidence 2023-10-06 2023-10-06 
11:14:11 11:14:11 
Creation time Account 


Description: 


2021-02-12 
iTunes Store 


19:52:23(UTC+1) 
Username: 


pe 2 hotmail. com 


Service Type: D315EB44-93E4- 
410A-8F11-E6059076BEA9 


Source: Accounts 


2023-10-06 
11:14:11 


2023-10-06 
11:14:11 


User Accounts 


È 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Creation time 
2021-02-12 
20:13:29(UTC+1) 
Username: 


pon r04Qhotmail.com 


Service Type: 194B5D3E-0728- 
4BB3-A6FD-57D29FEFF 145 


Source: Accounts 


81 User Accounts 


Evidence 


2023-10-06 
11:14:11 


2023-10-06 
11:14:11 + 


Creation time Account 
2021-02-12 Description: 
20:22:16(UTC+1) CloudKit 
Username: 
pone nd @hotmail.com 
Service Type: 5A38667F-6D4A- 
4473-A0E0-3228A4316934 
Source: Accounts 

82  |User Accounts Evidence 2023-10-06 2023-10-06 

11:14:13 11:14:13 a 

Creation time Account. 
2021-02-12 Description: 
20:24:08(UTC+1) Messages 
Username: 
M >2 O hotmail.com 
Service Type: 4CF534D4-7C44- 
4CEF-8B7A-68066A03D28E 
Source: Accounts 

83 User Accounts Evidence 2023-10-06 2023-10-06 

11:14:14 11:14:14 a 


Creation time 
Account Name: Mahad 


Source: WhatsApp 


User ID: 
WhatsApp User Id 
46790223662@s.whatsapp.net 


anvander 
WhatsApp. 


User Accounts 


Evidence 


2023-10-06 
11:14:18 


2023-10-06 
11:14:18 


Creation time 
Username: mahadmose 


Account Name: mahadmose 
Source: Instagram 


Photos: photo1.jpg 


User ID: 
Instagram Id 1050949595 


Profile Picture: 

Photo Url https://scontent-arn2- 
1.cdninstagram.com/v/t51.2885- 
19/5150x150/28157231_2072532 
109628182_85813638129621401 
6 n.jpg? nc ht=scontent-arn2- 
1.cdninstagram.com& nc ohc=Y 
9DJFUZFUWAAX8UnoUj&tp=18&0 
h=013c3c0201712afc7e26fa97b7 
e160cd&oe-606189B5 


Biography: M.VD.T JM TG 


85 User Accounts 


Evidence 


2023-10-06 
11:14:20 


2023-10-06 
11:14:20 5 


Creation time 
Username: orte.n421 


Account Name: orte.n421 
Source: Instagram 


Photos: 


User ID: 
Instagram Id 45995202971 


Profile Picture: 

Photo Url https://scontent-sea1- 
1.cdninstagram.com/v/t51.2885- 
19/44884218 345707102882519 
. 2446069589734326272 n.jpg? 
nc ht-scontent-sea1- 
1.cdninstagram.com& nc ohc-8 
AUoZNYMP5IAX- 
Y52pR&oh-1d23d094e49f5d216e 
0d1859269337d1&oe-605FE68F 
&ig cache key-YW5vbnltb3VzX3 
Byb2ZpbGVfcGlj.2 


86 User Accounts 


Evidence 


2023-10-06 
11:14:36 


2023-10-06 
11:14:36 * 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 213 
Creation time 


User ID: 
Username: pon Mana Instagram Id 217392203 HEMLIG 


Account Name: Pontus Profile Picture: 

Lindstrand Photo Url https://scontent-arn2- 
1.cdninstagram.com/v/t5 1.2885- 
19/5150x150/26157575 1445896 


Source: Instagram 72917481 297855711394660352 
.n.jpg? nc ht-scontent-arn2- 
Photos: photo1.jpg V uU RM CE 


IHxvu&tp-1&oh-eb7b2c44f296f8 
304adb5666f1c0064a&0e=60607 


013 
87 User Accounts Evidence 2023-10-06 2023-10-06 
11:14:41 11:14:41 a 
Creation time User ID: Birthday: 1996-10-24 22:00:00(UTC+0) 
Username: mahadmose4211 ver ID ca10df2d-08df-4a1c-b8fe- 
96f409f9b03d 
Account Name: thugz Mansion 
Email: 
Email Address 
Source: Snapchat mahad a496@hotmail.com 
Phone: 
Mobile Phone Number 
446793349073 


Evidence 2023-10-06 2023-10-06 
12:12:32 12:12:32 a 


Balosaudi 2021-02-16 Bluetooth Address: Artifact Family: Source: 
23:19:38 Connectivity 9C:DF:03:BD:34:4F Service Identifier: 


HABA Source Repository 


Path: 


2023-10-06 2023-10-06 


Geen 12:12:32 12:12:32 
PASSAT GTR Unknown 2021-02-17 Bluetooth Address: Artifact Family: 
21:04:41 Connectivity 30:C3:D9:37:8E:86 Ses Identifier: 
nature: : 
Source Repository 
Detected Path: 
90 =| Device Evidence 2023-10-06 2023-10-06 

Connectivity 12:12:33 12:12:33 = 


Pins Free 2021-02-20 Bluetooth Address: Artifact Family: Source: 
16:18:28 Connectivity F4:4E:FC:A5:22:1F Service Identifier: 


nature: 5 
Detected Source Repository 


2023-10-06 2023-10-06 
12:12:33 12:12:33 


My Volvo Car Unknown 2021-02-25 Bluetooth Address: Artifact Family: Source: 
09:54:33 Connectivity 58:16:D7:4E:3D:51 Service Identifier: 
nature: : 
Source Repository 
Detected Path: 
Locations | Evidence 2023-10-06 2023-10-06 
12:46:08 12:46:08 
(59.307625, 18.076355) Description: Skanstull 


Time: 2021-02-14 06:04:01(UTC+1) 
Source: Safari 
Service Identifier: 


93  |Locations | Evidence 2023-10-06 2023-10-06 
12:53:29 12:53:29 S 


(59.364926, 17.974430) Time: 2021-02-16 21:42:05(UTC+1) 
Source: Safari 
Service Identifier: 


2023-10-06 2023-10-06 
12:53:30 12:53:30 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 214 
M99.37Z4T5, TS.UUS309) escription: Quality Hotel Friends, Solna, 5 E = 
Stockholms lán, Sverige HEMLIG | 


Name: Quality Hotel Friends 


Time: 2021-02-16 22:56:36(UTC+1) 
Source: Booking.com 
Service Identifier: 


95  |Locations Evidence 2023-10-06 2023-10-06 
14:20:47 14:20:47 5 


Description: eddie jobe 


Time: 2021-02-15 21:06:55(UTC+1) 
Source: KnowledgeC 
Service Identifier: 


96  |Locations Evidence 2023-10-06 2023-10-06 
14:20:48 14:20:48 a 


Description: eddie jobe 


Time: 2021-02-15 21:06:56(UTC+1) 
Source: Safari 
Service Identifier: 


Locations 2023-10-06 2023-10-06 
14:20:49 14:20:49 


Description: eddie jobe 


Time: 2021-02-15 21:06:56(UTC+1) 
Source: Safari 
Service Identifier: 


98  |Locations Evidence 2023-10-06 2023-10-06 
14:20:49 14:20:49 


Description: eddie jobe 


Time: 2021-02-15 21:07:00(UTC+1) 
Source: Safari 
Service Identifier: 


99 Searched Items skanstull Evidence 2023-10-06 2023-10-06 
14:45:38 14:45:38 + 
2021-02-14 Safari skanstull Unknown 


06:03:18(UTC+1) 


100 |Searched Items Skanstull Evidence 2023-10-06 2023-10-06 
14:45:58 14:45:58 a 


2021-02-14 Safari Skanstull Unknown 
06:03:28(UTC+1) Position: (59.307625, 
18.076355) 
101  |Searched Items Skanstull, 118 60 Evidence 2023-10-06 2023-10-06 
Stockholm 14:46:01 14:46:01 a 


2021-02-14 Safari Skanstull, 118 60 Unknown 
06:03:29(UTC+1) Stockholm 
Position: (59.307625, 
18.076355) 
102 |Searched Items skanstull mc Evidence 2023-10-06 2023-10-06 
14:47:22 14:47:22 a 
2021-02-14 Safari skanstull mc Unknown 
06:04:34(UTC+1) 
103  |Searched Items skanstull óppet nu Evidence 2023-10-06 2023-10-06 
14:47:51 14:47:51 + 
2021-02-14 Safari skanstull öppet nu Unknown 


06:05:21(UTC+1) 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 215 


104 |Searched lt kanstull öppet Evid 2023-10-06 102871 / m 
earched Items skanstull óppet nu vidence ME be EMLIG | 


2021-02-14 Unknown 


06:06:12(UTC+1) 


Safari skanstull óppet nu 


105  |Searched Items eddie jobe Evidence 2023-10-06 2023-10-06 
14:52:45 14:52:45 


2021-02-15 Safari eddie jobe Unknown 
19:40:25(UTC+1) 
106 |Searched Items eddie j Evidence 2023-10-06 2023-10-06 
14:52:54 14:52:54 e 
2021-02-15 Safari eddie j Unknown 
19:40:42(UTC+1) 
107 |Searched Items kva saltvik Evidence 2023-10-06 2023-10-06 
14:52:57 14:52:57 a 
2021-02-15 Safari kva saltvik Unknown 
22:07:06(UTC+1) 
108 |Searched Items haktet góteborg Evidence 2023-10-06 2023-10-06 
14:53:01 14:53:01 = 
2021-02-15 Safari häktet göteborg Unknown 
22:21:03(UTC+1) 
109  |Searched Items haktet góteborg adre Evidence 2023-10-06 2023-10-06 
14:53:21 14:53:21 = 


2021-02-15 KnowledgeC häktet göteborg adre Unknown 
22:21:20(UTC+1) 


2023-10-20 2023-10-20 


08:29:23 08:29:23 
Created: Title: 4595 kod Account: 127B225E-BD11-4F92-8B8E- 
2021-02-12 Source: Notes D9FB6F76198A 
23:48:07(UTC+1) Labels: 
Modified: Body: 4595 kod 
2021-02-12 Parties: 
23:48:11(UTC+1) 
111 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:46:25 08:46:25 = 
E-post -mahad —|https://outlook.live.com/mail/0/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:22:19(UTC+ Account: 
n 0, 0, : 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) Source Repository pine z 
Path: B 
112 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Qutlook 08:47:14 08:47:14 + 
E-post - mahad —|https://outlook.live.com/mail/0/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:22:19(UTC+ Account: 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D/ 1) : Service 
Source Repository Identifier: 
113 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:14 08:47:14 + 
E-post -mahad —|https://outlook.live.com/mail/O/inbox/id/AQQKADA | 2021-02-13 Artifact Family: Source: 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:22:20(UTC+ KnowledgeC 
i 9, o . 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D/ 1) Source Repository Account: 
Path: identifier: 
114 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:15 08:47:15 a 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


E-pos 
alii - Outlook 


| NUPS:770UTIOOK.IIVE.COM/Mall/U/INDOX 


2021-02-13 T 
14:22:26(UTC+ 
1) 


Artiract Family: 


Source Repository 
Path: 


Identifier: 


115 [Web History 


E-post - mahad alii - Evidence 


Outlook 


2023-10-20 
08:47:15 


2023-10-20 
08:47:15 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/inbox/id/AQQKADA 
wATYWMAItZjlyADKtMGUyNCOwMAItMDAKABA 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 


Web History 


2021-02-13 
14:22:32(UTC+ 
1) 


E-post - mahad alii - Evidence 


Outlook 


Artifact Family: 
Source Repository 


Path: 


2023-10-20 
08:47:16 


Source: Safari 
Account: 
Service 
Identifier: 


2023-10-20 
08:47:16 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/inbox/id/AQQkADA 
wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D/ 


2021-02-13 
14:22:32(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Web History 


E-post - mahad alii - Evidence 


Outlook 


2023-10-20 
08:47:17 


2023-10-20 
08:47:17 


E-post -mahad —|https://outlook.live.com/mail/0/compose/AQMKAD | 2021-02-13 i Artifact Family: Source: Safari 
alii - Outlook AwATYwMAItZjlyADktMGUyNCOWMAItMDAKAE. | 14:22:34(UTC+ Account: 
YAAAO0kS5ikJG6RJgf5v73jwSYBwAM2nzdDOH | 1) s Repository | Service 
ET4FpPFPhZi3BAAACAQ8AAAAM2nzdDOHET4 ource Repository | identifier: 
FpPFPhZi3BAAQi4vpvAAAA Path: 
118 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:17 08:47:17 a 
E-post -mahad  |https://outlook.live.com/mail/0/compose/AQMKAD | 2021-02-13 Artifact Family: Source: 
alii - Outlook AwATYWMAItZjlyADktMGUyNCOWMAItMDAKAE | 14:22:35(UTC+ KnowledgeC 
YAAAO0kS5ikJG6RJgf5v73jwSYBwAM2nzdDOH | 1) s Repository | Account: 
ET4FpPFPhZi3BAAACA@8AAAAM2nzdDOHET4 Pa epository | Service 
FpPFPhZi3BAAQi4vpvAAAA ath: Identifier: 
119 [Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:19 08:47:19 = 


E-post - mahad 


https://outlook.live.com/mail/O/inbox/id/AQQKADA 


2021-02-13 


Artifact Family: 


Source: Safari 


alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:22:38(UTC+ Account: 
Å Aa A 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) Source Repository ee : 
Path: entifier: 
Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:19 08:47:19 
E-post -mahad —|https://outlook.live.com/mail/0/inbox 2021-02-13 Artifact Family: Source: Safari 
alii - Outlook 14:22:42(UTC+ Account: 
1) ; Service 
Source Repository | identifier 
Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:20 aT: 
E-post -mahad —|https://outlook.live.com/mail/0/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:34:07(UTC+ Account: 
Å an, é 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) Source Repository oe a 
Path: entifier: 
122 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:20 08:47:20 a 
E-post -mahad  |https://outlook.live.com/mail/0/inbox 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook 14:34:08(UTC+ Account: 
1) ; Service 
Source Repository | Identifier: 
123 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 


Outloo 


08:47:22 


08:47:22 


E-post -mahad  |https://outlook.live.com/mail/0/inbox 2021-02-13 Artifact Family: Source: 
alii - Outlook 14:34:15(UTC+ KnowledgeC 
1) i ccount: 
Source Repository Service 
i Identifier: 
124 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 


Qutloo! 


08:47:22 


08:47:22 


E-post= 
alii - Outlook 


wATYWMAItZjlyADKtMGUyNCOwMAItMDAKABA 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


ASNWMNvXEMEyZp9zOPic70Q%3D%3D 


2021-02-13 
cea 


Artiract Family: 


Source Repository 
Path: 


Identifier: 


125 [Web History 


E-post - mahad alii - 
Outlook 


Evidence 


2023-10-20 
08:47:22 


2023-10-20 
08:47:22 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/inbox/id/AQQKADA 
wATYWMAItZjlyADKtMGUyNCOwMAItMDAKABA 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D/ 


Web History 


2021-02-13 
won 


E-post - mahad alii - 
Outlook 


Evidence 


Artifact Family: 


Source Repository 
Path: 


2023-10-20 
08:47:23 


Source: Safari 
Account: 
Service 
Identifier: 


2023-10-20 
08:47:23 


E-post -mahad  |https://outlook.live.com/mail/0/compose/AQMKAD | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook AwATYwMAItZ¡lyADktMGUyNCOwMAIMDAKAE | 14:35:00(UTC+ Account: 
YAAAOOKS5ikJGERJgfSv7 3jwSYBwAM2nzdDOH | 1) s R it Service 
ET4F pPFPhZi3BAAACAQ8AAAAM2nzdDOHET4 ource Repository | identifier: 
FpPFPhZi3BAAQi4vpwAAAA Path: 
127 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:24 08:47:24 a 
E-post -mahad —|https://outlook.live.com/mail/O/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:35:03(UTC+ Account: 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) å Service 
ES Repository Identifier: 
128 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:25 08:47:25 4 
E-post - mahad  |https://outlook.live.com/mail/0/inbox 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook 14:35:05(UTC+ Account: 
1 ) ` Service 
ina Repository Identifier: 
129 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:26 08:47:26 + 


E-post -mahad —|https://outlook.live.com/mail/0/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYWMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:35:09(UTC+ Account: 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) : Service 
Source Repository Identifier: 
130 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:27 08:47:27 + 


E-post -mahad  |https://outlook.live.com/mail/0/compose/AQMKAD | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook AwATYwMAItZjlyADktMGUyNCOWMAItMDAKAE | 14:35:14(UTC+ Account: 
YAAAOOKS5ikJGERJgfSv7 3jwSYBwAM2nzdDOH | 1) " Service 
ET4FpPFPhZi3BAAACAQ8AAAAM2nzdDOHET4 Source Repository | Identifier: 
FpPFPhZi3BAAQi4vpxAAAA Path: 
131 [Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Qutlook 08:47:27 08:47:27 = 


E-post -mahad  |https://outlook.live.com/mail/O/inbox/id/AQQKkADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYWMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:35:16(UTC+ Account: 
Å eng à 
A5NWMNvXEMEyZp9zOPic70Q%3D%3D 1) Source Repository Barvice , 
Path: ener 
132 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Qutlook 08:47:27 08:47:27 a 


E-post -mahad —|https://outlook.live.com/mail/0/compose/AQMKAD | 2021-02-13 d Artifact Family: Source: Safari 
alii - Outlook AwATYwMAItZjlyADktMGUyNCOWMAItMDAKAE | 14:35:30(UTC+ Account: 
YAAAO0kS5ikJG6RJgf5v73jwSYBWAM2nzdDOH | 1) s RI Service 
ET4FpPFPhZi3BAAACAQ8AAAAM2nzdDOHET4 ource Repository | Identifier: 
FpPFPhZi3BAAQi4vpyAAAA Path: 
133 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 


Outloo! 


08:47:28 


08:47:28 


E-post -mahad  |https://outlook.live.com/mail/O/inbox/id/AQQkADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:35:40(UTC+ Account: 
| Aa A 
A5NWMNvXEMEyZp9zOPic70Q%3D%3D 1) Source Repository Se . 
Path: entifier: 
134 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:28 08:47:28 = 


a 


0 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
2021-02-13 
14:35:44(UTC+ 
1) 


pos 
alii - Outlook 


[Rütps:77/OUUOoOK.Tive.com/mai/U/InDox 


Artiract Family: 


Source Repository 
Path: 


Identifier: 


Web History 


E-post - mahad alii - 
Outlook 


Evidence 


2023-10-20 
08:47:29 


2023-10-20 
08:47:29 


E-post - mahad 
alii - Outlook 


https://outlook.live.com/mail/0/inbox/id/AQQKADA 
wATYwMAItZjlyADktMGUyNCOWMAIt{MDAKABA 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 


Web History 


2021-02-13 
EDI 


E-post - mahad alii - 
Outlook 


Evidence 


Artifact Family: 
Source Repository 


Path: 


2023-10-20 
08:47:29 


Source: Safari 
Account: 
Service 
Identifier: 


2023-10-20 
08:47:29 


E-post -mahad  |https://outlook.live.com/mail/0/compose/AQMKkKAD | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook AwATYwMAItZ¡lyADktMGUyNCOwMAIMDAKAE | 14:35:54(UTC+ Account: 
YAAAOOKS5ikJGERJgfSv7 3jwSYBwAM2nzdDOH | 1) s R it Service 
ET4F pPFPhZi3BAAACAQ8AAAAM2nzdDOHET4 ource Repository | identifier: 
FpPFPhZi3BAAQi4vpzAAAA Path: 
137 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:30 08:47:30 = 
E-post -mahad  |https://outlook.live.com/mail/0/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:35:59(UTC+ Account: 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) E Service 
ES Repository, Identifier: 
138 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:32 08:47:32 a 
E-post - mahad  |https://outlook.live.com/mail/0/inbox 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook 14:36:02(UTC+ Account: 
1) ; Service 
Era Repository Identifier: 
139 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:33 08:47:33 = 


E-post - mahad |https://outlook.live.com/mail/O/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:39:04(UTC+ Account: 
Å Aa å 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) Source Repository senice E 
140 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:33 08:47:33 = 
E-post - mahad |hitps://outlook.live.com/mail/0/compose/AQMKAD | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook AwATYwMAItZjlyADktMGUyNCOWMAItMDAKAE | 14:39:10(UTC+ Account: 
YAAAOOkSSikJG6RJgf5v73jwSYBwAM2nzdDOH | 1) s Ri it Service 
ET4FpPFPhZi3BAAACA@8AAAAM2nzdDOHET4 Pathe epository | identifier: 
FpPFPhZi3BAAQi4vp0AAAA ath: 
141 [Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:34 08:47:34 = 
E-post - mahad |https://outlook.live.com/mail/O/inbox/id/AQQKADA | 2021-02-13 1 Artifact Family: Source: Safari 
alii - Outlook wATYwMAItZjlyADktMGUyNCOWMAItMDAKABA | 14:39:28(UTC+ Account: 
ASNWMNvXEMEyZp9zOPic70Q%3D%3D 1) Source Repository | Service 
Path: P Y | Identifier: 
142 |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 08:47:35 08:47:35 = 
E-post - mahad |https://outlook.live.com/mail/0/inbox 2021-02-13 d Artifact Family: Source: Safari 
alii - Outlook 14:39:32(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
143 |Web History Dropbox - Evidence 2023-10-20 2023-10-20 
Förundersökningsprotok 08:51:33 08:51:33 = 
oll — Förenkla ditt liv 


Dropbox - 


sprotokoll — 
Förenkla ditt liv 


https://www.dropbox.com/sh/dejwsl48x6dg1az/AA | 2021-02-13 
Förundersökning | DhLYrUBhuxBTDxALly PnZa?dl-0 


144 |Web History 


AG :05(UTC+ 


2019 Mercedes-Benz A 
200, Svart / 163hk pa 
Biluppgifter.se 


Evidence 


Artifact Family: 


Source Repository 
Path: 


2023-10-20 
08:57:58 


Source: Safari 


Identifier: 


2023-10-20 
08:57:58 e 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 219 
2019 MUúps:7/DMUppgiter.se/roraon/JKGZ4U 2021-02-14 Artiract Family: S 
Benz A 200, 03:29:21(UTC+ 
Svart / 163hk pá 1) 


Biluppgifter.se paliko Repository Identifier: 


Web History 2020 Volvo XC40 D4 Evidence 2023-10-20 2023-10-20 
AWD, Mörkbrun / 190hk 09:07:33 09:07:33 
på Biluppgifter.se 


2020 Volvo https://biluppgifter.se/fordon/JSN49S 2021-02-15 1 Artifact Family: Source: Safari 
Së au 14:58:39(UTC+ Account: 
órkbrun 1 ; Service 
190hk pà Source Repository | Identifier: 
Biluppgifter.se Path: 
146 |Web History 2018 Nissan Qashqai 1.2 | Evidence 2023-10-20 2023-10-20 
DIG-T, Röd / 116hk på 13:32:47 13:32:47 
Biluppgifter. se 
2018 Nissan https://biluppgifter.se/fordon/NHC077 2021-02-15 Artifact Family: Source: Safari 
cael te er :59:09(UTC+ Account: 
-T, RO ; ervice 
116hk pà ) Source Repository Identifier: 
Biluppgifter.se Path: 
147 |Web History 2020 Volkswagen Evidence 2023-10-20 2023-10-20 
Passat, Svart / 190hk på 13:33:21 13:33:21 
Biluppgifter. se 
2020 https://biluppgifter.se/fordon/CTM45U 2021-02-15 Artifact Family: Source: Safari 
le ee 18:51:04(UTC+ Account: 
assat, Sva 1 ; Service 
190hk pà ) Source Repository | identifier: 
Biluppgifter.se ath: 
148 |Web History 2021 Mercedes-Benz Evidence 2023-10-20 2023-10-20 
GLE 350 DE, Mörkblå / 13:34:16 13:34:16 
194hk pa Biluppgifter. se 


2021 Mercedes- |https://biluppgifter.se/fordon/MXP72X 2021-02-15 Artifact Family: Source: Safari 
Bana D 19:03:39(UTC+ Account: 

, Mörkblå 1 ; Service 
194hk pà Source Repository Identifier: 
Biluppgifter.se am 


149 |Web History 


Quality Hotel Friends i Evidence 2023-10-20 2023-10-20 
Solna — uppdaterade 13:42:44 13:42:44 
priser för 2021 
Quality Hotel https://www.booking.com/hotel/se/quality- 2021-02-16 Artifact Family: Source: Safari 
Friends i Solna — | friends.sv.html?label=gen173nr- 13:58:39(UTC+ Account: 
uppdaterade 1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE | 1) S R it Service 
priser för 2021 |N2AEB6AEB-AELIAIBGAIDuAK3gq- ource Repository | Identifier: 
BBsACAdICJDFiNDFjYzg1LWM5MWYtNGMzZS Path: 


05MmM0OLWFkZmIZZDNmMzMyMNgCBuACAQ8 
sid-cb602dccc0a7647ccb33ac1440501f9a&all sr 
blocks=54686601 230913440 0 1 0%2C5468 
6601 230913440 0 1 O&checkin=2021-02- 
18&checkout-2021-02-21&dest id-- 
2522526&dest type-city&group adults=4&group 
children=0&hapos=1&highlighted_blocks=54686 
601 230913440 0 1 0%2C54686601 2309134 
40 0 1 O&hpos-1&no rooms=2&req adults-4&r 
eq_children=0&room1=A%2CA&room2=A%2CA& 
sr order=popularity&srepoch=1613480313&srpvi 
d=e8ae5b3ce2dd006e&ucfs=1&matching block i 
EE . 230913440 0 1 O&srhpz1&ref is - 
WIZ 


150 |Web History Booking.com: Sista Evidence 2023-10-20 2023-10-20 
steget 13:45:01 13:45:01 o 


Booking.com: https://secure.booking.com/book.html 2021-02-16 Artifact Family: Source: Safari 
Sista steget 14:01:02(UTC+ : 
1) 


Source Repository 


Path: Identifier: 


Web History Taxi | Boka taxi online - | Evidence 2023-10-20 2023-10-20 
Alltid fast pris | 13:46:13 13:46:13 
Taxijakt.se 


Taxi | Boka taxi |https://taxijakt.se/ 2021-02-16 1 Artifact Family: Source: Safari 
one FT. Atd fast 15:09:39(UTC+ Account: 
pris | Taxijakt.se 1) ; Service 
Source Repository Identifier: 
152 |Web History Branco - JIGGY (feat. Evidence 2023-10-20 2023-10-20 
N (Original) - Sök pa 13:50:22 13:50:22 
Google 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Branco - 
JIGGY (feat. 

Yasin) (Original) 
- Sok pa Google 


[MUps//WWW.google.se/searcr7q=Branco+- 
+JIGGY(feat.+Yasin)+(Original)&ie=UTF- 


8&0e=UTF-8&hl=sv-se&client=safari 


2021-02-16 
ig :42:35(UTC+ 


Artiract Family: 


Source Repository 
Path: 


Een 
ccount: 
Accon H 


Identifier: 


Web History 


Branco - JIGGY (feat. 


Yasin) (Original) - Sök pá 
Google 


Evidence 


2023-10-20 


13:50:23 


2023-10-20 
13:50:23 


Branco - https://www.google.se/search?q=Branco+- 2021-02-16 1 Artifact Family: Source: Safari 
JIGGY (feat. +JIGGY(feat.+Yasin)+(Original)&ie=UTF- 16:42:36(UTC+ Account: 
Yasin) (Original) |B&oe-UTF-8&hl-sv-se&client-safari 1) s R it Service 
- Sók pa Google ource Repository | identifier: 
Path: 
154 |Web History Branco Ft Yasin - JIGGY |Evidence 2023-10-20 2023-10-20 
(Official Lyrics) - 13:50:30 13:50:30 
YouTube 
Branco Ft Yasin |https://m.youtube.com/watch?v=BFPfiVfiG44 2021-02-16 Artifact Family: Source: Safari 
a acd (Official 16:42:39(UTC+ Account: 
yrics) - 1 ; Service 
YouTube Source Repository Identifier: 
Path: 
Web History YouTube Evidence 2023-10-20 2023-10-20 
13:50:32 13:50:32 


YouTube https://m.youtube.com/watch?v-BFPfiVfiG44 2021-02-16 Artifact Family: Source: Safari 
e :42:39(UTC+ Account 
; ervice 
Haring] Repository Identifier: 
156 |Web History Branco Ft Yasin - JIGGY |Evidence 2023-10-20 2023-10-20 
(Official Lyrics) - 13:50:34 13:50:34 
YouTube 


Branco Ft Yasin |https://m.youtube.com/watch?v-BFPfiVfiG44 2021-02-16 Artifact Family: Source: 
EN (Official 16:42:45(UTC+ KnowledgeC 

rics) - : ` 
YouTube 2 Source Repository Account 

Path: Identifier: 
157 |Web History Branco Ft Yasin - JIGGY |Evidence 2023-10-20 2023-10-20 
(ome icial Lyrics) - 13:51:08 13:51:08 
YouTube 


Branco Ft Yasin |https://m.youtube.com/watch?v-BFPfiVfiG44 2021-02-16 Artifact Family: Source: 
ve (Official 18:01:20(UTC+ KnowledgeC 
rics) - ; d 
YouTube 2 Source Repository Recount 
Path: Identifier: 
158 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 13:53:32 13:53:32 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
ES en len. skadad-efter-misstankt-skottlossning 20:24:28(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) Source Repository | identifier: 
Path: 
Web History flashback - Sök pá Evidence 2023-10-20 2023-10-20 
Google 13:55:06 13:55:06 
flashback - Sök | https://www.google.se/search?q=flashback8ie=U | 2021-02-16 Artifact Family: Source: Safari 
pá Google TF-8&oe-UTF-8&hl-sv-se&client-safari 20:30:23(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
Web History flashback - Sök på Evidence 2023-10-20 2023-10-20 
Google 13:55:29 13:55:29 
flashback - Sök |https://www.google.se/search?q=flashback&ie=U | 2021-02-16 Artifact Family: Source: Safari 
på Google TF-8&oe-UTF-8&hl-sv-se&client-safari 20:30:24(UTC+ Account: 
a ; Service 
Source Repository Identifier: 
Web History Flashback Forum | Evidence 2023-10-20 2023-10-20 
Yttrandefrihet på riktigt! 13:55:30 13:55:30 
Flashback https://www. flashback.org/ 2021-02-16 Artifact Family: Source: Safari 
Tomm | E 20:30:26(UTC+ Account: 
randefrihet pá 1 ; Service 
riktigt! Source Repository | Identifier: 
Path: 
162 |Web History Flashback Forum - Evidence 2023-10-20 2023-10-20 
Aktuella ämnen 13:55:31 13:55:31 à 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Flashback 
Forum - Aktuella 


ámnen 


https://www.flashback.org/aktuella-amnen 


2021-02-16 
ee 


Artifact Family: 


Source Repository 
Path: 


Source-Safari— 
Account: 

Service 

Identifier: 


Web History 


Flashback Forum - 


Aktuella åmnen 


2023-10-20 
13:55:32 


2023-10-20 
13:55:32 


Flashback 


https://www.flashback.org/aktuella-amnen 


Forum - Aktuella 


åmnen 


2021-02-16 
no. 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Web History 


ämnen 


Flashback Forum - Nya 


Evidence 


2023-10-20 
13:55:32 


2023-10-20 
13:55:32 


Flashback https://www.flashback.org/nya-amnen 2021-02-16 1 Artifact Family: Source: Safari 
Forum - Nya 20:30:44(UTC+ Account: 
ämnen 1) ; Service 
Source Repository Identifier: 
165 |Web History Flashback Forum - Nya | Evidence 2023-10-20 2023-10-20 
ämnen 13:55:33 13:55:33 Š 


Flashback https://www.flashback.org/nya-amnen 2021-02-16 Artifact Family: Source: 
Forum - Nya 20:30:45(UTC+ KnowledgeC 
einen 1) Source Repository Account 
Fathi Identifier: 
166 |Web History Flashback Forum - Evidence 2023-10-20 2023-10-20 
Aktuella ämnen 13:55:34 13:55:34 & 


Flashback https://www.flashback.org/aktuella-amnen 2021-02-16 1 Artifact Family: Source: Safari 
Forum - Aktuella 20:30:50(UTC+ Account: 
ämnen 1) ; Service 
Source Repository Identifier: 
167 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 13:58:40 13:58:40 å 
| Aftonbladet 


Skottlossning i 
Sundbyberg - en | /man-skadad-efter-misstankt-skottlossning 
skadad | 

Aftonbladet 


https://www.aftonbladet.se/senastenytt/a/7KmLkB 


2021-02-16 
21:01:59(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Web History 


Skottlossning i 
Aftonbladet 


Sundbyberg - en skadad 


2023-10-20 
13:58:44 


2023-10-20 
13:58:44 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
Se NES — en |/man-skadad-efter-misstankt-skottlossning 21:02:00(UTC+ Account: 
skada: 1 ; Service 
Aftonbladet | Source Repository | identifier: 
Path: 
169 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 


| Aftonbladet 


Sundbyberg - en skadad 


13:58:45 


13:58:45 


Skottlossning i 


https://www. aftonbladet.se/senastenytt/a/7 KmLkB 
/man-skadad-efter-misstankt-skottlossning 


2021-02-16 
2 :02:05(UTC+ 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Flashback Forum | 


Yttrandefrihet 


å riktigt! 


Evidence 


2023-10-20 
13:58:59 


2023-10-20 
13:58:59 


Flashback https://www.flashback.org/ 2021-02-16 1 Artifact Family: Source: Safari 
Fomm | REN 21:04:44(UTC+ Account: 
(ttrandefrihet på 1) ; Service 
riktigt! Source Repository | identifier: 
Path: 
171 [Web History Flashback Forum - Evidence 2023-10-20 2023-10-20 
Aktuella åmnen 13:59:00 13:59:00 a 


Flashback 
Forum - Aktuella 


ámnen 


https://www.flashback.org/aktuella-amnen 


2021-02-16 
21:04:49(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


[Web History Flashback Forum = [Evidence 


Aktuella åmnen 


EU 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 222 
17: 


ZUZ3-TU-ZU ^ |gUZS-TU-2U— —] 
3850 PSG | 


Flashback https://www.flashback.org/aktuella-amnen 2021-02-16 Artifact Family: Source: 
Forum - Aktuella 21:04:50(UTC+ KnowledgeC 
zungen 1) Source Repository Recount 
Path: Identifier: 
173 |Web History Flashback Forum - Nya | Evidence 2023-10-20 2023-10-20 
ämnen 13:59:01 13:59:01 = 


Flashback https://www.flashback.org/nya-amnen 2021-02-16 d Artifact Family: Source: Safari 
Forum - Nya 21:05:34(UTC+ Account: 
ámnen 1) ; Service 
Source Repository Identifier: 
174 |Web History Flashback Forum - Nya |Evidence 2023-10-20 2023-10-20 
inlagg 14:05:43 14:05:43 = 


Flashback https://www.flashback.org/nya-inlagg 2021-02-16 1 Artifact Family: Source: Safari 
Foum - Nya 21:05:39(UTC+ Account: 
inlagg 1) ; Service 
Source Repository Identifier: 
175 |Web History Taggsök Evidence 2023-10-20 2023-10-20 
14:05:44 14:05:44 = 


Taggsök https://www.flashback.org/search tags.php 2021-02-16 1 Artifact Family: Source: Safari 
21:05:37(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
176 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:05:45 14:05:45 = 
- Flashback Forum 


https://www.flashback.org/t3305870 2021-02-16 1 Artifact Family: Source: Safari 
1 ) :05:44(UTC+ Recount 
Source Repository Identine : 
» entifier: 
Flashback Path: | 
Forum 


177 |Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 2 - Flashback 

Forum 


Evidence 


2023-10-20 
14:05:46 


2023-10-20 
14:05:46 


Skottlossning https://www.flashback.org/t3305870p2 2021-02-16 1 Artifact Family: Source: Safari 
Ten He A :05:50(UTC+ Account 
undbyberg ; ervice 

feb 2021 - Sidan Source Repository | Identifier: 

2 - Flashback Path: 

Forum 

178 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:05:48 14:05:48 * 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-16 d Artifact Family: Source: Safari 
Tulegatan NG 21:05:51(UTC+ Account: 
undbyberg 1 ; Service 

feb 2021 - ) Source Repository |, identifier: 

Flashback Path: 

Forum 

179 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:05:48 14:05:48 * 
- Flashback Forum 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - 
Flashback 
Forum 


https://www.flashback.org/t3305870 


2021-02-16 
2 :05:55(UTC+ 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


180 |Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 2 - Flashback 
Forum 


Evidence 


2023-10-20 
14:05:49 


2023-10-20 
14:05:49 


Skottlossning https://www.flashback.org/t3305870p2 


2021-02-16 
21:07:47(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
81 |Web History 


- Sidan 2 - Flashback 
Forum 


SKomossning Tulegatan | 
Sundbyberg 16 feb 2021 


Evidence 


14:05:50 


Oru 


Skottlossning https://www.flashback.org/t3305870p2 2021-02-16 Artifact Family: Source: 
NG 21:07:50(UTC+ KnowledgeC 

undbyberg 1 i Account: 
feb 2021 - Sidan ) Source Repository | Service 
2 - Flashback am Identifier: 
Forum 

182 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:05:50 14:05:50 S 


- Sidan 2 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p2 2021-02-16 Artifact Family: Source: 
u nG 21:10:55(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository service 
2 - Flashback am. Identifier: 
Forum 
Web History Flashback Forum | Evidence 2023-10-20 2023-10-20 
Yttrandefrihet pá riktigt! 14:07:44 14:07:44 
Flashback https://www.flashback.org/ 2021-02-16 Artifact Family: Source: Safari 
rorum GINA 21:18:48(UTC+ Account: 
randefrihet pá 1 ; Service 
riktigt! | Source Repository | identifier: 
Path: 
Web History Flashback Forum - Nya | Evidence 2023-10-20 2023-10-20 
inlagg 14:07:45 14:07:45 


Flashback https://www.flashback.org/nya-inlagg 2021-02-16 Artifact Family: Source: Safari 
Forumi Nya 21:18:52(UTC+ Account: 
inlägg 1) ; Service 
Borce Repository Identifier: 
185 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:07:46 14:07:46 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-16 Artifact Family: Source: Safari 
Me er 16 21:18:55(UTC+ Account: 
unabyberg 1 ; Service 

feb 2021 - ) Source Repository Identifier: 

Flashback Path: 

Forum 

186 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:07:46 14:07:46 a 
- Sidan 3 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p3 2021-02-16 Artifact Family: Source: Safari 
Un d NG 21:18:58(UTC+ Account: 
undbyberg 1 ; Service 

feb 2021 - Sidan Source Repository | Identifier: 

3 - Flashback Rate 

Forum 

187 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:07:47 14:07:47 a 
- Sidan 3 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p3 2021-02-16 Artifact Family: Source: 
Tulegatan T 21:19:00(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository | Service 
3 - Flashback Set Identifier: 
Forum 
Web History Du lämnar nu Flashback | Evidence 2023-10-20 2023-10-20 
Forum 14:07:50 14:07:50 


Du lámnar nu https://www.flashback.org/leave.php?u=https%3A | 2021-02-16 Artifact Family: Source: Safari 
Flashback %2F%2Fwww.aftonbladet.se%2Fsenastenytt%2F | 21:19:51(UTC+ Account: 
Forum a%2F7KmLkB%2Fman-skadad-efter-misstankt- | 1) R S Service 
skottlossning Source Repository | identifier: 
Path: 
189 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:07:52 14:07:52 
| Aftonbladet 


a 


6 


See Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
2021-02-16 
25 :31:09(UTC+ 


Sundbyberg = En /man-skadad-efter-misstankt-skottlossning 


Artiract Family: 


skadad | s R it 
Aftonbladet ource Repository | Identifier: 
Path: 
Web History Skottlossning i 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:07:58 14:07:58 
| Aftonbladet 
Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 
Sundbyberg - en |/man-skadad-efter-misstankt-skottlossning 21:31:15(UTC+ KnowledgeC 
skada . à 
Aftonbladet i Source Repository ey 
an: Identifier: 
191 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:08:42 14:08:42 a 
- Sidan 3 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p3 2021-02-16 Artifact Family: Source: 
IU 16 21:34:05(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
3 - Flashback Path: Identifier: 
Forum 
192 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
puo 16 feb 2021 14:08:43 14:08:43 e 
- Sidan 4 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: Safari 
d NG 21:34:44(UTC+ Account: 
unabyberg 1 ` Service 
feb 2021 - Sidan ) Source Repository | Identifier: 
4 - Flashback Path: 
Forum 
193 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:08:44 14:08:44 4 
- Sidan 4 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: 


a :34:50(UTC+ neuen 
; ccount: 
Source Repository SENES 


Identifier: 


2023-10-20 
14:08:45 


2023-10-20 
14:08:45 


194 |Web History Skottlossning Tulegatan |Evidence 
Sundbyberg 16 feb 2021 
- Sidan 4 - Flashback 


Forum 


Skottlossning https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: 
ruegan NG 21:41:45(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Bouree Repository | Service 
4 - Flashback EE Identifier: 
Forum 
Web History Du lámnar nu Flashback |Evidence 2023-10-20 2023-10-20 
Forum 14:09:48 14:09:48 
Du lámnar nu https://www.flashback.org/leave.php?u=https%3A | 2021-02-16 Artifact Family: Source: Safari 
Flashback %3F%2F goo. gl%2Fmaps%2FUVSXVGgxsjkbXN | 21:42:03(UTC+ Account: 
Forum KA9 1) ; Service 
Source Repository | identifier: 
Web History Evidence 2023-10-20 2023-10-20 
14:11:39 14:11:39 
https://goo.gl/maps/UVsXVGqxsjkbXNKA9 2021-02-16 Artifact Family: Source: Safari 
21:42:05(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
Web History Evidence 2023-10-20 2023-10-20 
14:11:55 14:11:55 
https://www.google.se/maps/@59.3649269,17.97 | 2021-02-16 Artifact Family: Source: Safari 
443,3a,75y,356.4h,96.44t/data=!3m6!1e1!3m4!1s | 21:42:05(UTC+ Account: 
D2qsM9e FIWhOhTS8JVOFA!2e0!7i16384!8i8192 1 5 Service 
?shorturl=1 ) Source Repository Identifier: 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
98 (Web History 


- Sidan 4 - Flashback 
Forum 


SKomossning Tulegatan | 
Sundbyberg 16 feb 2021 


Evidence 


14:13:05 


Skottlossning https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: 
De NG 22:02:15(UTC+ KnowledgeC 

undbyberg 1 i Account: 
feb 2021 - Sidan ) Source Repository | Service 
4 - Flashback am Identifier: 
Forum 

199 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:13:06 14:13:06 S 


- Sidan 4 - Flashback 
Forum 


Skottlossning |https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: 
Tegan 16 22:03:00(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository (service 
4 - Flashback all: Identifier: 
Forum 
200 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Ser I 16 feb 2021 14:13:07 14:13:07 + 
- Sidan 4 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: 
megan - 22:03:25(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
4 - Flashback ath: Identifier: 
Forum 
201 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:13:07 14:13:07 a 
- Sidan 4 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: 
Tulegatan vs 22:08:10(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
4 - Flashback AU: Identifier: 
Forum 
202 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:13:08 14:13:08 * 


- Sidan 4 - Flashback 
Forum 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
4 - Flashback 
Forum 


https://www.flashback.org/t3305870p4 


2021-02-16 
Du 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Web History 


Skottlossning i 
Sundbyberg - en skadad 
| Aftonbladet 


14:13:40 


2023-10-20 


2023-10-20 
14:13:40 


Skottlossning i 


https://www.aftonbladet.se/senastenytt/a/7KmLkB 


2021-02-16 


Artifact Family: 


Source: Safari 


Pa ee en | /man-skadad-efter-misstankt-skottlossning 22:08:38(UTC+ Account: 
skada 1 ; Service 
Aftonbladet | Source Repository | identifier: 
Path: 
204 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
batak anG en skadad 14:13:41 14:13:41 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
aa maba en |/man-skadad-efter-misstankt-skottlossning 22:08:38(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) Source Repository | identifier: 
Path: 
205 [Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:13:42 14:13:42 
| Aftonbladet 


Skottlossning i https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 

ines en |/man-skadad-efter-misstankt-skottlossning 22:09:17(UTC+ Account: 

skada 1 ; Service 

Aftonbladet ) Source Repository | identifier: 

Path: 
206 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

Sundbyberg - en skadad 14:13:43 14:13:43 e 
| Aftonbladet 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 226 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Source: 
Sundbyberg - en |/man-skadad-efter-misstankt-skottlossning 22:09:20(UTC+ KnowledgeC 
skadad | 1) ; Account: 
Aftonbladet h Service 

Identifier: 

207 |Web History Skottlossning i Evidence 
Sundbyberg - en skadad 
Aftonbladet 

Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 1 Artifact Family: Source: Safari 
SE - en |/man-skadad-efter-misstankt-skottlossning 22:10:56(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) reg Repository enter 


208 |Web History 


Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg — en skadad 14:13:44 14:13:44 a 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 
nd - en |/man-skadad-efter-misstankt-skottlossning 22:11:00(UTC+ KnowledgeC 
skada 1 ; Account: 
Aftonbladet | Source Recto Serica 

GAYE Identifier: 

209 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyperg — en skadad 14:15:34 14:15:34 = 
| Aftonbladet 

Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 1 Artifact Family: Source: Safari 

Fe - en |/man-skadad-efter-misstankt-skottlossning 22:22:19(UTC+ Account: 

skada: 1 ; Service 

Aftonbladet ) Source Repository | Identifier: 
Path: 

210 [Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:15:34 14:15:34 a 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 1 Artifact Family: Source: Safari 

ae - en |/man-skadad-efter-misstankt-skottlossning 22:22:19(UTC+ Account: 

skada 1 ; Service 

Aftonbladet ) Source Repository | identifier: 

Path: 
211 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

Sundbyberg - en skadad 14:15:35 14:15:35 e 
| Aftonbladet 


= 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
Sundbyberg - en | /man-skadad-efter-misstankt-skottlossning 22:22:38(UTC+ Account: 


skadad | 1 A Service 
Aftonbladet i Source Repository | identifier 
Path: 
212 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:15:36 14:15:36 = 
| Aftonbladet 


Skottlossning i  [https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 
ne — en |/man-skadad-efter-misstankt-skottlossning 22:22:40(UTC+ KnowledgeC 
skada 1 ; Account: 
Aftonbladet Source Repository | Service 


Identifier: 


Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:15:55 14:15:55 a 
- Sidan 4 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p4 2021-02-16 Artifact Family: Source: 
eech 46 22:22:50(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository. [service 
4 - Flashback au: Identifier: 
Forum 
214 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:15:56 14:15:56 = 
- Sidan 5 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 1 Artifact Family: Source: Safari 
en 16 22:23:01(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan Source Repository | Identifier: 
5 - Flashback Path: 
Forum 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
Web History Skottlossning Tulegatan | 
Sundbyberg 16 feb 2021 


- Sidan 5 - Flashback 
Forum 


¡Evidence 
14:15:56 


Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
mun NG 22:23:05(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan ) Source Repository | Service 
5 - Flashback ath: Identifier: 
Forum 
216 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:15:57 14:15:57 S 


- Sidan 5 - Flashback 
Forum 


Skottlossning |https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
D d 16 22:23:25(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository "Service 
5 - Flashback gut: Identifier: 
Forum 
217 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:18:06 14:18:06 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
An en |/man-skadad-efter-misstankt-skottlossning 22:23:28(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) Source Repository | identifier: 
Path: 
218 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:18:08 14:18:08 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 
Sundbyberg - en |/man-skadad-efter-misstankt-skottlossning 22:23:30(UTC+ KnowledgeC 
skadad | 1 ; Account: 
Aftonbladet Source Repository "Service 
am: Identifier: 
219 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:18:08 14:18:08 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
Sundbyberg - en |/man-skadad-efter-misstankt-skottlossning 22:26:10(UTC+ Account: 
1) 


skadad | s Service 
Aftonbladet Source Repository | ¡q entifier: 


Web History Skottlossning i 2023-10-20 2023-10-20 


Sundbyberg - en skadad 
Aftonbladet 


14:18:09 


14:18:09 


Skottlossning i 
Sundbyberg - en 
skadad | 
Aftonbladet 


https://www.aftonbladet.se/senastenytt/a/7KmLkB 
/man-skadad-efter-misstankt-skottlossning 


2021-02-16 
22:26:15(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Web History 


Skottlossning i 
Sundbyberg - en skadad 


2023-10-20 


14:18:10 


2023-10-20 
14:18:10 


Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
ee en | /man-skadad-efter-misstankt-skottlossning 22:27:43(UTC+ Account: 
skada 1 ; Service 
Aftonbladet Source Repository | identifier: 
Path: 
222 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:18:11 14:18:11 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 
ed de - en |/man-skadad-efter-misstankt-skottlossning 22:27:45(UTC+ KnowledgeC 
skada 1 ; Account: 
Aftonbladet | SE ees 
EU Identifier: 
223 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:19:20 14:19:20 = 


- Sidan 5 - Flashback 
Forum 


Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 228 


MUPS77/WWWw.TrasnDack.Org/133U587UP> 2021-02-16 Artüract Family: 
een OE 
undbyberg : 
feb 2021 - Sidan ) Boe Repository i 
5 - Flashback EINE Identifier: 
Forum 
224 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:19:21 14:19:21 * 
- Sidan 5 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 

Ur Ae 22:33:45(UTC+ KnowledgeC 
undbyberg 1 ; Account: 

feb 2021 - Sidan Source Repository | Service 

5 - Flashback SUR Identifier: 

Forum 


225 [Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:19:22 14:19:22 
- Sidan 5 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
Tuegann " 22:35:35(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
5 - Flashback ath: Identifier: 
Forum 
226 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:20:14 14:20:14 = 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 d Artifact Family: Source: Safari 

See - en |/man-skadad-efter-misstankt-skottlossning 22:45:38(UTC+ Account: 

skada 1 ; Service 

Aftonbladet ) Source Repository | Identifier: 

Path: 
227 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

See - en skadad 14:20:15 14:20:15 = 
| Aftonbladet 


= 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
ne - en |/man-skadad-efter-misstankt-skottlossning 22:45:39(UTC+ Account: 
skada 


1 ; Service 
Aftonbladet Source Repository | Identifier: 
Path: 
228 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:20:49 14:20:49 a 
- Sidan 5 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
Tegan 16 22:45:50(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Bodine Repository | Service 
5 - Flashback ath: Identifier: 
Forum 
229 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:20:49 14:20:49 * 
- Sidan 5 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
22:46:20(UTC+ KnowledgeC 
ib] Source Repository perle 

5 - Flashback Path: Identifier: 

Forum 


Web History Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 5 - Flashback 
Forum 


Evidence 2023-10-20 


14:20:51 


2023-10-20 
14:20:51 


Skottlossning https://www flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
Le era He 22:46:45(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repositori Service 
5 - Flashback ath: Identifier: 
Forum 
231 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
cedet — en skadad 14:21:44 14:21:44 + 
| Aftonbladet 


See Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 229 


MUPS7/WwWw.attonpradet.sersenastenytar/KMLKB | 2021-02-16 Aruract Family: 
Tu oa En /man-skadad-efter-misstankt-skottlossning 22:47:26(UTC+ 
1) 


skadad | 


Aftonbladet Source Repository | identifier: 


Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:22:16 14:22:16 
- Sidan 5 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
iere T 22:52:00(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | service 
5 - Flashback ath: Identifier: 
Forum 
233 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:22:17 14:22:17 > 
- Sidan 5 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p5 2021-02-16 Artifact Family: Source: 
Tuegann nG 22:53:20(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository "service 
5 - Flashback am: Identifier: 
Forum 
234 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:22:18 14:22:18 5 
- Sidan 6 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: Safari 
megan 16 22:55:04(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan | Source Repository | Identifier: 
6 - Flashback Path: 
Forum 


235 |Web History Evidence 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 6 - Flashback 


Forum 


2023-10-20 
14:22:18 


2023-10-20 
14:22:18 


Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
Tulegatan 16 22:55:05(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository | Service 
6 - Flashback path: Identifier: 
Forum 
236 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:22:19 14:22:19 a 
- Sidan 6 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
Tulegatan 16 22:55:15(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan ) Source Repository | Service 
6 - Flashback an: Identifier: 
Forum 
237 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:22:19 14:22:19 4 
- Sidan 6 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
Tulegatan NG 22:56:05(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository | Service 
6 - Flashback Path: Identifier: 
Forum 
238 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyperg 16 feb 2021 14:22:20 14:22:20 - 
- Sidan 6 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
ied k 22:56:30 (UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository [Service 
6 - Flashback am: Identifier: 
Forum 
239 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:23:20 14:23:20 
| Aftonbladet 


See Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 230 


MUps//WWW.attonbladet.se/senastenyia/7TKMLKB | 2021-02-16 Artiract Family: 
Sundbyberg = En /man-skadad-efter-skottlossning-i-sundbyberg 22:57:28(UTC+ 
skadad | 1) s R it 
Aftonbladet ource Repository | Identifier: 
Path: 
Web History Skottlossning i 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:23:21 14:23:21 
| Aftonbladet 
Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
nn en |/man-skadad-efter-skottlossning-i-sundbyberg 22:57:28(UTC+ Account: 
skada: 1 ; Service 
Aftonbladet Source Repository | Identifier: 
Path: 
241 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
qeda en skadad 14:23:22 14:23:22 
| Aftonbladet 
Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
See en |/man-skadad-efter-skottlossning-i-sundbyberg 22:58:20(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) Source Repository | Identifier: 
Path: 
242 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:23:22 14:23:22 
| Aftonbladet 
Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
ERU RE en |/man-skadad-efter-skottlossning-i-sundbyberg 22:58:33(UTC+ Account: 
skada: 1 ; Service 
Aftonbladet ) Source Repository | identifier: 
Path: 
243 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:23:23 14:23:23 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 

Sundbyberg - en |/man-skadad-efter-skottlossning-i-sundbyberg 22:58:35(UTC+ KnowledgeC 

a 1) Source Repository Account 
Path: Identifier: 


2023-10-20 
14:23:59 


244 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 
Sundbyberg 16 feb 2021 14:23:59 
- Sidan 6 - Flashback 


Forum 


Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 


On EE 
" ccount: 

feb 2021 - Sidan ) Source Repository Servios 

6 - Flashback SEU Identifier: 


Forum 


Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:23:59 14:23:59 a 
- Sidan 6 - Flashback 


Forum 


Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
Tn 16 23:01:30(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
6 - Flashback an: Identifier: 
Forum 
246 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:24:06 14:24:06 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 
ba - en |/man-skadad-efter-skottlossning-i-sundbyberg 23:01:35(UTC+ KnowledgeC 
skada: 1 ; Account: 
Aftonbladet ) Source Repository | Service 
an: Identifier: 
247 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:24:06 14:24:06 
| Aftonbladet 
Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
OS en |/man-skadad-efter-skottlossning-i-sundbyberg 23:02:55(UTC+ Account: 
skada: 1 ; Service 
Aftonbladet | Source Repository | identifier: 
Path: 
248 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
let - en skadad 14:24:07 14:24:07 * 
| Aftonbladet 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


231 


Skottlossning i 


https://www.aftonbladet.se/senastenytt/a/7KmLkB 


Sundbyberg - en | /man-skadad-efter-skottlossning-i-sundbyberg 


skadad | 
Aftonbladet 


249 |Web History 


2021-02-16 
ne 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 6 - Flashback 
Forum 


Evidence 


Artifact Family: 


Source Repository 
Path: 


2023-10-20 


14:24:07 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


2023-10-20 
14:24:07 


- Sidan 6 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
iud 16 23:03:45(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository [service 
6 - Flashback ath Identifier: 
Forum 
250 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:24:08 14:24:08 = 


Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
UA na 23:03:55(UTC+ KnowledgeC 
undbyberg 1 ; Account: 

feb 2021 - Sidan Source Repository. [Sonics 

6 - Flashback am: Identifier: 

Forum 

251 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:24:08 14:24:08 + 
- Sidan 6 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p6 2021-02-16 Artifact Family: Source: 
ee T 23:27:15(UTC+ KnowledgeC 
unabyberg 1 i Account: 
feb 2021 - Sidan | Source Repository | Service 
6 - Flashback Path: Identifier: 
Forum 
252 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:24:08 14:24:08 a 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 1 Artifact Family: Source: Safari 
Sundbyberg - en |/man-skadad-efter-skottlossning-i-sundbyberg 23:28:13(UTC+ Account: 
skadad | 1 ; Service 
Aftonbladet ) Source Repository | ¡q entifier: 
Path: 
253 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:24:09 14:24:09 
| Aftonbladet 


Skottlossning i 
Sundbyberg - en 
skadad | 
Aftonbladet 


https://www.aftonbladet.se/senastenytt/a/7KmLkB 
/man-skadad-efter-skottlossning-i-sundbyberg 


2021-02-16 
AA 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


254 


Web History 


Skottlossning i 
Sundbyberg be en skadad 
| Aftonbladet 


Evidence 


14:24:09 


2023-10-20 


2023-10-20 
14:24:09 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: Safari 
SE RUE en |/man-skadad-efter-skottlossning-i-sundbyberg 23:36:47(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) Source Repository |, identifier: 
Path: 
255 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:24:09 14:24:09 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 Artifact Family: Source: 
Hab al - en |/man-skadad-efter-skottlossning-i-sundbyberg 23:36:50(UTC+ KnowledgeC 
skada: 1 ; Account: 
Aftonbladet Source Repository | Service 
an. Identifier: 
256 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
Sundbyberg - en skadad 14:24:10 14:24:10 
| Aftonbladet 


Skottlossning i 
Sundbyberg - en 
skadad | 
Aftonbladet 


https://www. aftonbladet.se/senastenytt/a/7 KmLkB 
/man-skadad-efter-skottlossning-i-sundbyberg 


2021-02-16 
23:41:04(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


257 


Web History 


Skottlossning i 
Sundbyberg - en skadad 
Aftonbladet 


Evidence 


2023-10-20 
14:24:18 


Skottlossning i 


https://www. aftonbladet.se/senastenytt/a/7 KmLkB 


Sundbyberg - en |/man-skadad-efter-skottlossning-i-sundbyberg 


skadad | 
Aftonbladet 


258 |Web History 


2021-02-16 
a 


Skottlossning i 
Sundbyberg - en skadad 
| Aftonbladet 


Artifact Family: 


Source Repository 
Path: 


2023-10-20 
14:24:19 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


2023-10-20 
14:24:19 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 1 Artifact Family: Source: Safari 

al - en |/man-skadad-efter-skottlossning-i-sundbyberg 23:54:31(UTC+ Account: 

skada 1 ; Service 

Aftonbladet i Source Repository | Identifier: 

Path: 
259 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

Sundbyberg — en skadad 14:24:19 14:24:19 a 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-16 1 Artifact Family: Source: Safari 

oaks - en |/man-skadad-efter-skottlossning-i-sundbyberg 23:54:31(UTC+ Account: 

skada 1 ; Service 

Aftonbladet ) Source Repository | identifier: 

Path: 
260 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

Sundbyberg - en skadad 14:24:19 14:24:19 a 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-17 1 Artifact Family: Source: Safari 

ee - en |/man-skadad-efter-skottlossning-i-sundbyberg 00:04:06(UTC+ Account: 

skada: 1 ; Service 

Aftonbladet ) Source Repository | identifier: 

Path: 
261 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

Sundbyberg - en skadad 14:24:20 14:24:20 “ 
| Aftonbladet 


Skottlossning i 
Sundbyberg - en 
skadad | 
Aftonbladet 


https://www. aftonbladet.se/senastenytt/a/7 KmLkB 
/man-skadad-efter-skottlossning-i-sundbyberg 


2021-02-17 
00:04:10(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 

Identifier: 


Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 6 - Flashback 

Forum 


Evidence 


2023-10-20 
14:24:21 


2023-10-20 
14:24:21 


Skottlossning https://www.flashback.org/t3305870p6 2021-02-17 Artifact Family: Source: 
Tee NG 00:04:30(UTC+ KnowledgeC 

undbyberg 1 ; Account: 
feb 2021 - Sidan Bouree Repository | Service 
6 - Flashback an: Identifier: 
Forum 

263 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:24:23 14:24:23 * 


- Sidan 7 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p7 2021-02-17 1 Artifact Family: Source: Safari 
Tulegatan 46 Me tA Account 
undbyberg ; ervice 
feb 2021 - Sidan ) Source Repository Identifier: 
7 - Flashback al: 
Forum 
264 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:24:24 14:24:24 a 


- Sidan 7 - Flashback 
Forum 


Skottlossning  [https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: Source: 
TUA 16 00:05:00(UTC+ KnowledgeC 
undbyberg 1 ; Account: 

feb 2021 - Sidan Source Repository service 

7 - Flashback an: Identifier: 

Forum 

265 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:24:26 14:24:26 2 
- Sidan 7 - Flashback 
Forum 


Sundbyberg 16 
feb 2021 - Sidan 


9802-21 


233 


Calls mm, 2023-11-01 14:47 diarienr: 5000-K18! 


2021-02-17 
pa Poon a 


Artiract Family: 


Source Repository 
Path: 


7 - Flashback Identifier: 
Forum 
266 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:24:30 14:24:30 * 


- Sidan 7 - Flashback 
Forum 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
7 - Flashback 
Forum 


https://www.flashback.org/t3305870p7 


Web History 


2021-02-17 
a :29:35(UTC+ 


Skottlossning i 
Sundbyberg - en skadad 
| Aftonbladet 


Artifact Family: 


Source Repository 
Path: 


2023-10-20 


14:24:31 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


2023-10-20 
14:24:31 


Skottlossning i https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-17 1 Artifact Family: Source: Safari 

See - en |/man-skadad-efter-skottlossning-i-sundbyberg 01:29:35(UTC+ Account: 

skada 1 ; Service 

Aftonbladet i Source Repository | Identifier: 

Path: 
268 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

Sundbyberg — en skadad 14:24:33 14:24:33 > 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-17 Artifact Family: Source: 
ne - en |/man-skadad-efter-skottlossning-i-sundbyberg 01:29:40(UTC+ KnowledgeC 
skada 1 ; Account: 
Aftonbladet | Source RAGAY NG Erico 
au Identifier: 
269 |Web History Skottlossning i Evidence 2023-10-20 2023-10-20 
see dec — en skadad 14:24:34 14:24:34 + 
| Aftonbladet 


Skottlossning i https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-17 1 Artifact Family: Source: Safari 

Ee - en |/man-skadad-efter-skottlossning-i-sundbyberg 01:40:45(UTC+ Account: 

skada 1 ; Service 

Aftonbladet ) Source Repository | Identifier: 

Path: 
270 [Web History Skottlossning i Evidence 2023-10-20 2023-10-20 

Sundbyberg - en skadad 14:24:35 14:24:35 å 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-17 Artifact Family: Source: 

OE - en |/man-skadad-efter-skottlossning-i-sundbyberg 01:40:50(UTC+ KnowledgeC 

skada 1 ; Account: 

Aftonbladet Source Repository || service 

al: Identifier: 
271 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:24:41 14:24:41 a 
- Sidan 7 - Flashback 
Forum 


Skottlossning 


7 - Flashback 
Forum 


https://www.flashback.org/t3305870p7 


2021-02-17 
01:41:45(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


272 


Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 7 - Flashback 
Forum 


Evidence 


2023-10-20 


14:24:42 


2023-10-20 
14:24:42 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
7 - Flashback 
Forum 


https://www.flashback.org/t3305870p7 


2021-02-17 
% :51:40(UTC+ 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Web History 


Skottlossning i 
Sundbyberg - en skadad 
Aftonbladet 


2023-10-20 


14:24:48 


2023-10-20 
14:24:48 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-17 1 Artifact Family: Source: Safari 
A - en |/man-skadad-efter-skottlossning-i-sundbyberg 02:04:52(UTC+ Account: 
skada 1 ; Service 
Aftonbladet ) Bourge Repository Identifier: 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
74 [Web History Skottiossning’ [Evidence ZUZ3-TU-ZU |gUZ3-TU-ZU 
Sundbyberg — en skadad 14:24:48 
| Aftonbladet 


Skottlossning i  |https://www.aftonbladet.se/senastenytt/a/7KmLkB | 2021-02-17 1 Artifact Family: Source: Safari 

be - en |/man-skadad-efter-skottlossning-i-sundbyberg 02:04:52(UTC+ Account: 

skada 1 ; Service 

Aftonbladet Source Repository | identifier: 

Path: 
275 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:24:54 14:24:54 = 
- Sidan 7 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p7 2021-02-17 Artifact Family: Source: 
Tessa NG 02:11:20(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
7 - Flashback an: Identifier: 
Forum 
276 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:24:55 14:24:55 + 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-17 1 Artifact Family: Source: Safari 
E 02:11:21(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - ) Source Repository | identifier: 
Flashback Path: 
Forum 
277 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:24:56 14:24:56 * 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-17 Artifact Family: Source: 
en T 02:11:25(UTC+ KnowledgeC 
un er 1 5 E 

a ) Source Repository Account 

Flashback Path: Identifier: 

Forum 

278 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:25:19 14:25:19 e 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-17 1 Artifact Family: Source: Safari 
Te NG 11:38:51(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - ) Source Repository | Identifier: 
Flashback Path: 
Forum 
279 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:25:19 14:25:19 ka 
- Sidan 8 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p8 2021-02-17 1 Artifact Family: Source: Safari 
TE ie 11:38:52(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan | Source Repository | Identifier: 
8 - Flashback Path: 
Forum 
280 [Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:25:20 14:25:20 a 
- Sidan 8 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p8 2021-02-17 Artifact Family: Source: 
Me å 11:38:55(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
8 - Flashback an: Identifier: 
Forum 
281 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:49 14:29:49 = 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-17 1 Artifact Family: Source: Safari 


lie erm 15:16:40(UTC+ Account 
NAG oy Borg ; ervice 
feb 2021 - ) Se Repository |, dentifier: 
Flashback ath: 


Forum 


282 


Web History 2023-10-20 


14:29:49 


2023-10-20 
14:29:49 


Skottlossning Tulegatan |Evidence 
Sundbyberg 16 feb 2021 
- Sidan 9 - Flashback 


Forum 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 235 


Skottlossning https://www.flashback.org/t3305870p9 2021-02-17 1 Artifact Family: Source: 
Me ct 16 15:16:43(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan Source Repository | Identifier: 
9 - Flashback Path: 
Forum 
283  |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:50 14:29:50 a 
- Sidan 9 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
UA RE 15:16:45(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
9 - Flashback ain. Identifier: 
Forum 
284 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:50 14:29:50 x 
- Sidan 9 - Flashback 
Forum 
Skottlossning  [https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
ID 16 15:18:10(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan EE 
9 - Flashback al: Identifier: 
Forum 
285 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:51 14:29:51 = 
- Sidan 9 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
ne NG 15:19:15(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository Service 
9 - Flashback am: Identifier: 
Forum 
286 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:51 14:29:51 4 
- Sidan 9 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
Tulegatan | 15:24:05(UTC+ KnowledgeC 
9 - Flashback Fath: Identifier: 
Forum 


287 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:52 14:29:52 
- Sidan 9 - Flashback 


Forum 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
9 - Flashback 
Forum 


https://www.flashback.org/t3305870p9 2021-02-17 


nag :55(UTC+ 


Artifact Family: Source: 
KnowledgeC 
Account: 
Service 

Identifier: 


Source Repository 
Path: 


Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:52 14:29:52 a 
- Sidan 9 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
e he 15:42:35(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository. [service 
9 - Flashback au: Identifier: 
Forum 
289 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:29:52 14:29:52 = 
- Sidan 9 - Flashback 
Forum 
Skottlossning  [https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
be ewe 16 15:42:40(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
9 - Flashback an: Identifier: 
Forum 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
9 


"Web History 


- Flashback Forum 


SKomossning Tulegatan | 
Sundbyberg 16 feb 2021 


Evidence 


|. 236 


Skottlossning 


Flashback 
Forum 


https://www.flashback.org/t3305870 


2021-02-17 
17:16:57(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 9 - Flashback 
Forum 


Evidence 


2023-10-20 
14:30:52 


2023-10-20 
14:30:52 


Skottlossning 
Tulegatan 
Sundbyberg 16 


https://www.flashback.org/t3305870p9 


2021-02-17 1 
alab Waa 


Artifact Family: 


Source Repository 


Source: Safari 
Account: 
Service 


feb 2021 - Sidan : Identifier: 
9 - Flashback Path: 
Forum 
292 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:30:53 14:30:53 e 


- Sidan 9 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
UG ar 17:17:00(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repositori || Service 
9 - Flashback an: Identifier: 
Forum 
293 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sue 16 feb 2021 14:30:54 14:30:54 = 
- Sidan 9 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p9 2021-02-17 Artifact Family: Source: 
megan 38 17:17:40(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Reposo | Sorvica 
9 - Flashback GU. Identifier: 
Forum 
294 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:31:33 14:31:33 4 
- Sidan 9 - Flashback 
Forum 


Skottlossning 


feb 2021 - Sidan 
9 - Flashback 
Forum 


https://www.flashback.org/t3305870p9 


2021-02-17 
Hedin 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


295 |Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 9 - Flashback 
Forum 


Evidence 


2023-10-20 
14:31:34 


2023-10-20 
14:31:34 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
9 - Flashback 
Forum 


https://www.flashback.org/t3305870p9 


2021-02-17 
(Esto 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


296 |Web History 


Skottlossning Tulegatan 

Sundbyberg 16 feb 2021 

- Sidan 10 - Flashback 
Forum 


Evidence 


2023-10-20 
14:31:34 


2023-10-20 
14:31:34 


Skottlossning https://www.flashback.org/t3305870p10 2021-02-17 Artifact Family: Source: Safari 
Ur NG n: :51:05(UTC+ Account 
undbyberg ; ervice 
feb 2021 - Sidan ) Source Repository Identifier: 
10 - Flashback Path: 
Forum 
297 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:31:35 14:31:35 a 


- Sidan 10 - Flashback 
Forum 


9802-21 


Calls mm, 2023-11-01 14:47 diarienr: 5000-K18 


MUPS7/WWW.TlasnNback.Org/133U587UPTU 7021-02-17 Artüract Family: Soura 
Sundbybera 16 18:51:10(UTC+ Kno 
undbyberg 1 ; Account 
feb 2021 - Sidan Boe Repository Service 
10 - Flashback at Identifier: 
Forum 
298 |Web History Quality Hotel Friends i Evidence 2023-10-20 2023-10-20 
Solna — uppdaterade 14:33:34 14:33:34 = 
priser för 2021 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 
Quality Hotel https://www.booking.com/hotel/se/quality- 2021-02-17 1 Artifact Family: Source: Safari 
Friends i Solna — |friends.sv.html?label-gen173nr- 20:12:41(UTC+ Account: 
uppdaterade 1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE | 1 : Service 
priser för 2021 |N2AEBGAEB- Source Repository | Identifier: 


AELiAIBgAIDuAKI1bWBBsACAdICJDc2MGNjYjg 
SLWZKMjAtNDMyNS 1hMWVhLWYAZTOQ10OTI2Yjl 
OYtgCBuACAQ:;sid-cb602dccc0a7647ccb33ac14 
40501f9a;all sr blocks-54686601 230913440 0 
1 0962C54686601 230913440 O 1 O;checkin- 
2021-02-18;checkout-2021-02-21;dest id-- 

2522526;dest type=city;dist=0;group adults=4;gr 
oup children=0;hapos=1;highlighted blocks=546 
86601 230913440 0 1 0%2C54686601 23091 
3440 0 1 O;hpos=1;matching block id=546866 


01 230913440 0 1 O:no rooms-2;ref is wiir 
eq_adults=4;req_children=0;room1=A%2CA;room 
2=A%2CA;sb_price_type=total;sr_order=popularit 
y;srepoch=1613589148;srpvid=5cad870e5f9a014 
4;type=total;ucfs=1& 


299 |Web History Evidence 2023-10-20 2023-10-20 
14:34:22 14:34:22 a 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
https://www.booking.com/ 2021-02-17 1 Artifact Family: Source: Safari 
20:12:09(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
300 |Web History Booking.com | Officiell Evidence 2023-10-20 2023-10-20 
sida| Basta hotellen och 14:34:23 14:34:23 = 
boendealternativen 
Title URL Last Visited Visits Usage Pattern ‚Additional info Source Info Deleted 
Booking.com | https://www.booking.com/index.sv.html?label=gen | 2021-02-17 1 Artifact Family: Source: Safari 
Officiell sida] 173nr- 20:12:09(UTC+ Account: 
Båsta hotellen 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA | 1) S R 3 Service 
och EN2AEB6AEBiAIBgAIDuAKI 1bWBBsACAdICJDe Ei epository | identifier: 
boendealternativ |2MGNjYjg5LWZkMjAtNDMyNS 1hMWVhLWYAZT ath: 
en Q10TI2YjI0YtgCBeACAQ;sid=cb602dccc0a7647 
ccb33ac1440501f9a;keep landing=1&sb price ty 
pe=total& 
301 |Web History Booking.com | Officiell Evidence 2023-10-20 2023-10-20 
sida| Båsta hotellen och 14:34:23 14:34:23 * 
boendealternativen 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
Booking.com | https://www.booking.com/index.sv.html?label=gen | 2021-02-17 Artifact Family: Source: 
Officiell sida| 173nr- 20:12:15(UTC+ KnowledgeC 
Basta hotellen 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA | 1) s R it Account: 
och EN2AEB6AEBiAIBgAIDuAKI 1bWBBsACAdICJDc Pence epository | cervice 
boendealternativ | 2MGNjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT an Identifier: 
en Q10TI2YjI0YtgCBeACAQ;sid=cb602dccc0a7647 
ccb33ac1440501f9a;keep landing=1&sb price ty 
pe=total& 
302 |Web History Booking.com | Officiell Evidence 2023-10-20 2023-10-20 
sida| Båsta hotellen och 14:34:24 14:34:24 a 
boendealternativen 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
Booking.com | https://www.booking.com/index.sv.html?label=gen | 2021-02-17 1 Artifact Family: Source: Safari 
Officiell sida] 173nr- 20:12:15(UTC+ Account: 
Básta hotellen 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA | 1) S R it Service 
och EN2AEB6AEBiAIBgAIDuAKI 1bWBBsACAdICJDe Pathe epository | Identifier: 
boendealternativ |2MGNjYjg5LWZKMjAtNDMyNS 1hMWVhLWYAZT ath: 
en Q10TI2YjI0YtgCBeACAQ;sid=cb602dccc0a7647 
ccb33ac1440501f9a;keep landing=1&sb price ty 
pe=total&#overlay 
303 |Web History Booking.com | Officiell Evidence 2023-10-20 2023-10-20 
sida] Basta hotellen och 14:34:24 14:34:24 = 
boendealternativen 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
Booking.com | https://www.booking.com/index.sv.html?label=gen | 2021-02-17 1 Artifact Family: Source: Safari 
Officiell sida] 173nr- 20:12:20(UTC+ Account: 
Basta hotellen 1BCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA | 1) S R ^ Service 
och EN2AEB6AEBiAIBgAIDuAKI 1bWBBsACAdICJDe Pah epository | Identifier: 
boendealternativ |2MGNjYjg5LWZKMjAtNDMyNS 1hMWVhLWYAZT aur 
en Q10TI2YjI0YtgCBeACAQ;sid=cb602dccc0a7647 
ccb33ac1440501f9a;keep landing=1&sb price ty 
pe=total& 
304 |Web History Booking.com | Officiell Evidence 2023-10-20 2023-10-20 
sida| Båsta hotellen och 14:34:25 14:34:25 - 
boendealternativen 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 


Officiell sida] 
Básta hotellen 
och 
boendealternativ 
en 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


MUPSs7/WWW.DOOKINJ.COM/INGEX.SV.NIMI7Taber=gen| 
173nr- 
1BCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA 
EN2AEBOAEBIAIBgAIDuAKI1bWBBSACAdICJDc 
2MGNjYjg5LWZKMjAtNDMyNS 1hMWVhLWYAZT 
Q10TI2YjI0YtgCBeACAQ;sid=cb602dccc0a7647 
ccb33ac1440501f9a;keep landing=1&sb price ty 
pe=total&#overlay 


[2021-02-17 
20:12:20(UTC+ 
1) 


Aruract Family: 


Source Repository 
Path: 


305 


Web History 


Booking.com | Officiell 
sida| Basta hotellen och 
boendealternativen 


Evidence 


2023-10-20 
14:34:25 


2023-10-20 
14:34:25 


a 


Title 


URL 


Last Visited 


Visits 


Usage Pattern 


Additional info 


Source Info 


Deleted | 


Booking.com | 
Officiell sida| 
Basta hotellen 
och 
boendealternativ 
en 


https://www.booking.com/index.sv.html?label-gen 
173nr- 
1BCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA 
EN2AEBOAEBIAIBgAIDuAKI1bWBBSsACAdICJDc 
2MGNjYjg5LWZkMjAtNDMyNS1hMWVhLWY4ZT 
Q10TI2YjI0YtgCBeACAQ;sid=cb602dccc0a7647 
ccb33ac1440501f9a;keep landing=1&sb price ty 
pe=total& 


2021-02-17 
20:12:24(UTC+ 
1) 


1 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


306 


Web History 


Booking.com | Officiell 
sida| Båsta hotellen och 
boendealternativen 


Evidence 


2023-10-20 
14:34:25 


2023-10-20 
14:34:25 


P 


Title 


URL 


Last Visited 


Visits 


Usage Pattern 


Additional info 


Source Info 


Deleted | 


Booking.com | 
Officiell sida| 
Básta hotellen 
och 
boendealternativ 
en 


https://www.booking.com/index.sv.html?label-gen 
173nr- 
1BCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA 
EN2AEBOAEBIAIBgAIDuAKI1bWBBSsACAdICJDc 
2MGNjYjg5LWZkMjAtNDMyNS 1hMWVhLWY4ZT 
Q10TI2YjI0YtgCBeACAQ;sid=cb602dccc0a7647 
ccb33ac1440501f9a;keep landing=1&sb price ty 
pe=total& 


2021-02-17 
20:12:27(UTC+ 
1) 


1 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


307 


Web History 


Booking.com : Hotell i 
Solna . Boka hotell nu! 


Evidence 


2023-10-20 
14:34:26 


2023-10-20 
14:34:26 


Title 


URL 


Last Visited 


Visits 


Usage Pattern 


Additional info 


Source Info 


Deleted 


Booking.com : 
Hotell i Solna . 
Boka hotell nu! 


https://www.booking.com/searchresults.sv.html?s 
rc=index&rows=20&error_url=https%3A%2F%2F 
www.booking.com%2Findex.sv.html%3Flabel%3 
Dgen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MGNjYjg 
5LWZKMJAINDMyNS1NMWVhLWY4ZTQ10TI2YjI 
OYtgCBuACAQ%3Bsid%3Dcb602dccc0a7647ccb 
33ac1440501f9a%3Bsb price type%3Dtotal%26 
%3B&label=gen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECMAElUAEHyAE 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MGNjYjg 
5LWZkMjAtLNDMyNS1hMWVhLWY4ZTQ1OTI2Yjl 
OYtgCBuACAQ&sid=cb602dccc0a7647ccb33ac1 
440501f9a&sb=1&sb Ip=1&search form id=a6c1 
870414ab0085&ssne-Solna&ssne untouched=S 
olna&checkin monthday=18&checkin year mont 
h=2021- 

2&checkout monthday=21&checkout year mont 
h=2021-2&checkin=2021-02-18&checkout=2021- 
02- 


21&group adults-4&group children=0&no room 
s-2&group adults overlay=4&group children ov 
erlay=0&no rooms overlay=2&lpsr=1&dest type 
=hotel&dest id-546866&ss raw=Solna+fr&ss la 
bel=Quality+Hotel+Friends%2C+Solna%2C+Stoc 
kholms+1%C3%A4n%2C+Sverige&place id lon= 
18.00336938937998place id lat=59.3724157004 
33&ac position=0&ac suggestion list length=2& 
ac langcode=sv&search selected=true&ac size= 
5&ac click type=b&latitude=59.3724157004338&l| 
ongitude=18.0033693893799&search pageview ` 
id=a6c1870414ab0085 


2021-02-17 
20:12:28(UTC+ 
1) 


1 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


308 


Web History 


Booking.com : Hotell i 
Solna . Boka hotell nu! 


Evidence 


2023-10-20 
14:34:26 


2023-10-20 
14:34:26 


| a 


Title 


URL 


Last Visited 


Visits 


Usage Pattern 


Additional info 


Source Info 


Deleted 


71 


Booking: 5 
Hotell i Solna . 
Boka hotell nu! 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
rc=index&rows=20&error_url=https%3A%2F%2F 


www.booking.com%2Findex.sv.html%3Flabel%3 
Dgen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBSACAdICJDc2MGNjYjg 
SLWZKMjAtNDMyNS 1hMWVhLWYAZTOQ10OTI2Yjl 
OYtgCBuACAQ%3Bsid%3Dcb602dccc0a7647ccb 
33ac1440501f9a%3Bsb price type%3Dtotal%26 
%3B&label=gen173nr- 

1FCAE0gg146AdIM 1gEaMgBiAECmAEluAEHyAE 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MGNjYjg 
5LWZkMjAtNDMyNS1hMWVhLWY4ZTQ10T12Yjl 
OYtgCBuACAQ&sid=cb602dccc0a7647ccb33ac1 
440501f9a&sb=1&sb lp-1&search form id=a6c1 
870414ab0085&ssne-Solna&ssne untouched-S 
olna&checkin monthday=18&checkin year mont 
h=2021- 

2&checkout monthday=21&checkout year mont 
h=2021-2&checkin=2021-02-18&checkout=2021- 
02- 

21&group adults-4&group children=0&no room 
s-2&group adults overlay=4&group children ov 
erlay=0&no rooms overlay=2&lpsr=1&dest type 
=hotel&dest_id=546866&ss_raw=Solna%20fr&ss 
_label=Quality%20Hotel%20Friends%2C%20Sol 
na%2C%20Stockholms%201%C3%A4n%2C%20 
Sverige&place id lon=18.0033693893799&place 
id lat=59.372415700433&ac position=0&ac su 
ggestion list length=2&ac langcode=sv&search ` 
selected=true&ac size=5&ac click type-b&latitu 
de=59.372415700433&longitude=18.0033693893 
799&search pageview id=a6c1870414ab0085 


2021-02-17 
20:12:29(UTC+ 
1) 


Aruract Family: 


Source Repository 
Path: 


309 


Web History 


Booking.com : Hotell i 
Solna . Boka hotell nu! 


Evidence 


14:34:27 


2023-10-20 


2023-10-20 
14:34:27 


| a 


Title 


URL 


Last Visited 


Visits 


Usage Pattern 


Additional info 


Source Info Deleted | 


Booking.com : 
Hotell i Solna . 
Boka hotell nu! 


https://www.booking.com/searchresults.sv.html?s 
rc=index&rows=20&error_url=https%3A%2F%2F 
www.booking.com%2Findex.sv.html%3Flabel%3 
Dgen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECMAElUAEHyAE 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MGNjYjg 
5LWZKMJAINDMyNS1NMWVhLWY4ZTQ10TI2YjI 
OYtgCBuACAQ%3Bsid%3Dcb602dccc0a7647ccb 
33ac1440501f9a%3Bsb price type%3Dtotal%26 
%3B&label=gen173nr- 

1FCAE0gg146AdIM 1gEaMgBiAECmAEluAEHyAE 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MGNjYjg 
5LWZkKMjAtLNDMyNS1hMWVhLWY4ZTQ1OTI2Yjl 
OYtgCBuACAQ&sid=cb602dccc0a7647ccb33ac1 
440501f9a&sb=1&sb Ip=1&search form id=a6c1 
870414ab0085&ssne=Solna&ssne untouched=S 
olna&checkin monthday=18&checkin year mont 
h=2021- 

2&checkout monthday=21&checkout year mont 
h=2021-2&checkin=2021-02-18&checkout=2021- 
02- 

21&group adults=4&group children=0&no room 
s=2&group adults overlay=4&group children ov 
erlay=0&no rooms overlay=2&lpsr=1&dest type 
-hotel&dest id-546866&ss raw=Solna%20fr&ss 
_label=Quality%20Hotel%20Friends%2C%20Sol 
na%2C%20Stockholms%201%C3%A4n%2C%20 
Sverige&place id lon=18.0033693893799&place 
id lat=59.372415700433&ac position=0&ac su 
ggestion list length=2&ac langcode-sv&search ` 
selected=true&ac size=5&ac click type-b&latitu 
de-59.372415700433&longitude-18.0033693893 
799&search pageview id=a6c1870414ab0085 


2021-02-17 
20:12:35(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


310 


Web History 


priser fór 2021 


Quality Hotel Friends i 
Solna - uppdaterade 


Evidence 


14:34:27 


2023-10-20 


2023-10-20 
14:34:27 


P 


Title 


URL 


Last Visited 


Visits 


Usage Pattern 


Additional info 


Source Info Deleted | 


Quality Hotel 
Friends i Solna — 
uppdaterade 
priser fór 2021 


https://www.booking.com/hotel/se/quality- 
friends.sv.html?label=gen173nr- 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE 
N2AEBGAEB- 
AELiAIBgAIDuAKI1bWBBSsACAdICJDc2MGNjYjg 
5LWZkMjAtNDMyNS1hMWVhLWY4ZTQ10TI2Y]I 
OYtgCBuACAQ&sid=cb602dccc0a7647ccb33ac1 
440501f9a&all sr blocks=54686601 230913440 
0 1 0%2C54686601 230913440 0 1 O&check 


in=2021-02-18&checkout=2021-02-21&dest id-- 
2522526&dest type=city&group adults=4&group 
_children=0&hapos=1&highlighted_blocks=54686 
601_230913440_0_1_0%2C54686601_2309134 


40 0 1 O&hpos-1&no rooms-2&req adults=4&r 
eq_children=0&room1=A%2CA&room2=A%2CA& 
sr order=popularity&srepoch=1613589148&srpvi 
d=5cad870e5f9a0144&ucfs=1&matching block i 
d=54686601 230913440 O 1 O&ref is wI=1&sr 


hp=1 


2021-02-17 
20:12:40(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


311 |Web History Quality Hotel Friends i Evidence 2023-10-20 2023-10-20 
Solna - uppdaterade 14:34:29 14:34:29 = 
priser för 2021 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 


Quality 
Friends i Solna - 
uppdaterade 


MIPS7/WWW.DOOKINJ.COM/SEarcNresUlts.SV.NIMT7S | 
rc=index&rows=20&error_url=https%3A%2F%2F 


www.booking.com%2Findex.sv.html%3Flabel%3 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


[2021-02-17 
20:12:41(UTC+ 
1) 


Aruract Family: 


Source Repository 


priser för 2021 Dgen173nr- : 
1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE Path: 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBSACAdICJDc2MGNjYjg 
5LWZkMjAtNDMyNS1hMWVhLWY4ZTQ10TI2Y]I 
OYtgCBuACAQ%3Bsid%3Dcb602dccc0a7647ccb 
33ac1440501f9a%3Bsb price type%3Dtotal%26 
%3B&label=gen173nr- 
1FCAE0gg146AdIM 1gEaMgBiAECmAEluAEHyAE 
N2AEB6AEB- 
AELiAIBgAIDuAKI1bWBBsACAdICJDc2MGNjYjg 
5LWZkMjAtNDMyNS1hMWVhLWY4ZTQ1OTI2YjI 
OYtgCBuACAQ&sid=cb602dccc0a7647ccb33ac1 
440501f9a&sb=1&sb lp-1&search form id=a6c1 
870414ab0085&ssne-Solna&ssne untouched-S 
olna&checkin monthday=18&checkin year mont 
h=2021- 
2&checkout monthday=21&checkout year mont 
h=2021-2&checkin=2021-02-18&checkout=2021- 
02- 
21&group adults=4&group children=0&no room 
s=2&group adults overlay=4&group children ov 
erlay=0&no rooms overlay=2&lpsr=1&dest type 
=hotel&dest id=546866&ss raw=Solna+fr&ss la 
bel=Quality+Hotel+Friends%2C+Solna%2C+Stoc 
kholms+1%C3%A4n%2C+Sverige&place id lon= 
18.0033693893799&place id lat-59.3724157004 
33&ac position-0&ac suggestion list length=2& 
ac langcode=sv&search selected-true&ac size= 
5&ac click type-b&latitude-59.372415700433&l 
ongitude=18.0033693893799&search pageview ` 
E a6c1870414ab0085:highlighted hotels-54686 
312 |Web History Quality Hotel Friends i Evidence 2023-10-20 2023-10-20 
Solna - uppdaterade 14:35:11 14:35:11 2 
priser fór 2021 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
Quality Hotel https://www.booking.com/hotel/se/quality- 2021-02-17 Artifact Family: Source: 
Friends i Solna — | friends.sv.html?label=gen173nr- 20:12:45(UTC+ KnowledgeC 
uppdaterade 1FCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyAE | 1 ` Account: 
priser för 2021 |N2AEB6AEB- ) Source Repository | Service 
AELiAIBgAIDUAKI1bWBBsACAdICJDc2MGNjYjg Path: Identifier: 
5LWZKkMjAtNDMyNS1hMWVhLWYAZTQ1OTI2Yjl 
OYtgCBuACAQ;sid=cb602dccc0a7647ccb33ac14 
40501f9a;all sr blocks=54686601 230913440 0 
1 0%2C54686601 230913440 O 1 O;checkin- 
2021-02-18;checkout=2021-02-21;dest id=- 
2522526;dest type=city;dist=0;group adults=4;gr 
oup children=0;hapos=1;highlighted blocks=546 
86601 230913440 0 1 0%2C54686601 23091 
3440 0 1 O:hpos-1:matching block id=546866 
01 230913440 O 1 O:no rooms-2;ref is wiir 
eq adults=4;req children=0;room1 =A%2CA; room 
2=A%2CA;sb_price_type=total;sr_order=popularit 
y;srepoch-1613589148;srpvid-5cad870e5f9a014 
4;type=total;ucfs=1& 
313 |Web History oslo - Sök pá Google Evidence 2023-10-20 2023-10-20 
14:35:25 14:35:25 e 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
oslo - Sók pá https://www.google.se/search?q=oslo&ie=UTF- 2021-02-18 1 Artifact Family: Source: Safari 
Google 8&0e=UTF-8&hl=sv-se&client=safari 00:16:05(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
314 |Web History oslo - Sök på Google Evidence 2023-10-20 2023-10-20 
14:35:26 14:35:26 È 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
oslo - Sók pá https://www.google.se/search?q=oslo&ie=UTF- 2021-02-18 1 Artifact Family: Source: Safari 
Google 8&0e=UTF-8&hl=sv-se&client=safari 00:16:06(UTC+ Account: 
1) ; Service 
Source Repository | Identifier: 
315 |Web History Oslo — Google Maps Evidence 2023-10-20 2023-10-20 
14:36:46 14:36:46 = 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
Oslo - Google https://www.google.com/maps/place/Oslo,+Norge | 2021-02-18 1 Artifact Family: Source: Safari 
Maps /@59.3873913,17.9874414,12z/data=!4m2!3m1!1 | 00:16:57(UTC+ Account: 
S0x4641666112671039:0x7e92605fd3231e9a?hl- | 1) s Ri it Service 
sv-se Pathe epository | identifier: 
316 |Web History Norge till Norge - Google | Evidence 2023-10-20 2023-10-20 
Maps 14:36:53 14:36:53 = 
Title URL Last Visited Visits Usage Pattern ‚Additional info Source Info Deleted 
Norge till Norge |https://www.google.com/maps/dir/Lillestrt%C3%B | 2021-02-18 1 Artifact Family: Source: Safari 
- Google Maps |8m,+Norge/Oslo,+Norge/@59.9454311,10.90707 | 00:19:22(UTC+ Account: 
76, 10z/data=!4m8!4m7!1m2!1m1!1s0x46417b5f8 | 1) : Service 
2bbf777:0x6021ba6f044063cd!1m2!1m1!1s0x464 Source Repository | erfier. 
16e6112671039:0x7e92605fd3231e9a!3e0?hl=sv- Path: 
se 


317 


Web History 


Norge till Norge - Google | Evidence 
Maps 


2023-10-20 


14:37:08 


2023-10-20 
14:37:08 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Norge till Norge |https://www.google.com/maps/dir/T%C3%B8nsbe | 2021-02-18 1 Artifact Family: Soure 
— Google Maps |rg,#Norge/Oslo,#Norge/@59.5937976,10.459580 | 00:34:02(UTC+ Account 
4,8z/data=!4m8!4m7!1m2!1m1!1s0x4646b7388d7 | 1) 2 Service 
57dab:0x90ca1 3e6ed9f9a3f1m2!1m11150x46416 Source Repository | Identifier: 
e61f267f039:0x7e92605fd3231e9a!3e0?hl=sv-se Path: 
Web History oslo tidszon - Sök pa Evidence 2023-10-20 2023-10-20 
Google 14:37:48 14:37:48 


oslo tidszon - https://www.google.se/search?client=safari&chan | 2021-02-18 Artifact Family: Source: 

Sök på Google |nel=iphone bm&source-hp&ei-6qctYKiyGMn5q | 00:34:25(UTC+ KnowledgeC 
wHst66YCg&q=oslo+tidszon&oq=oslo+tid&gs lcp | 1) s R it Account: 
-ChFtb2JpbGUtZ3dzL XdpeilocBABGAlyAggAM ource Repository | Service 
glIADICCAAyAggAMgIIADICCAAyAggAMgYIABA Path: Identifier: 
WEBA46AggpOg4IKRCxAxDHARCjAhCTAjoLCCk 
QxwEQrwEQkwl6CwgpELEDEIMBEJMCOggIAB 
CxAxCDAToICC4QsQMQgwE6CwguELEDEMcB 
EKMCOglILjoF CAAQsQM6CwguELEDEMcBEK8 
BOgUILhCxAzolCCkQsQMQkwIi6CAguEMcBEK8 
BOggILhCxAxCTAjoLCCAQxwEQrwEQkwJQ6hF 
YIXNg- 
oEBaAJwAHgAgAFSiAH1BZIBAzUuM5gBAKABA 
bABDwésclient=mobile-gws-wiz-hp 

Web History oslo tidszon - Sók pá Evidence 2023-10-20 2023-10-20 
Google 14:37:54 14:37:54 


oslo tidszon - 
Sök pá Google 


https://www.google.se/search?client=safari&chan 
nel=iphone bm&source-hp&ei-6qctYKiyGMn5q 
wHst66YCg&q=oslo+tidszon&oq=oslo+tid&gs Icp 
=ChFtb2JpbGUtZ3dzLXdpei1ocBABGAlyAggAM 
glIADICCAAyAggAMgIIADICCAAyAggAMgYIABA 
WEB46AggpOg4IKRCxAxDHARCJAhCTAjoLCCk 
QxwEQrwEQkwl6CwgpELEDEIMBEJMCOgglAB 
CxAxCDAToICC4QsQMQgwE6CwguELEDEMcB 
EKMCOglILjoFCAAQsQM6CwguELEDEMCBEK8 
BOgUILhCxAzoICCkQsQMQkwI6CAguEMcBEK8 
BOggILhCxAxCTAjoLCC4QxwEQrwEQkwJQ6hF 
YIXNg- 
oEBaAJwAHgAgAFSiAH1BZIBAzUuM5gBAKABA 
bABDwésclient-mobile-gws-wiz-hp 


2021-02-18 
qu :34:21(UTC+ 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Flashback Forum 


Evidence 


2023-10-20 
14:38:03 


2023-10-20 
14:38:03 


Skottlossning 


Flashback 
Forum 


https://www.flashback.org/t3305870 


Web History 


2021-02-18 
al 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 12 - Flashback 
Forum 


Evidence 


Artifact Family: 


Source Repository 
Path: 


2023-10-20 
14:38:03 


Source: Safari 
Account: 
Service 
Identifier: 


2023-10-20 
14:38:03 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-18 1 Artifact Family: Source: Safari 
NG Map ll Account: 
undbyberg ; ervice 
feb 2021 - Sidan ) Source Repository | identifier: 
12 - Flashback ath: 
Forum 
322 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:38:04 14:38:04 S 


- Sidan 12 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: Source: 
T nG 04:48:40(UTC+ KnowledgeC 

undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository | Service 
12 - Flashback am. Identifier: 
Forum 

323 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:38:09 14:38:09 + 


- Sidan 12 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: Source: 
Taegan 46 04:49:45(UTC+ KnowledgeC 

undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
12 - Flashback au: Identifier: 
Forum 

324 [Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:38:10 14:38:10 4 


- Sidan 12 - Flashback 
Forum 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Skottlossning 


https://www flashback.org/t3305870p12 


2021-02-18 


Artifact Family: 


- Sidan 12 - Flashback 


Me dra ie 05:29:10(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Po Service 
12 - Flashback ath: Identifier: 
Forum 
325 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:39:12 14:39:12 


Forum 


- Sidan 12 - Flashback 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-18 1 Artifact Family: Source: Safari 
Tulegann RP 1 6:33:40(UTC+ Account 
undbyberg ; ervice 
feb 2021 - Sidan ) Source Repository | identifier: 
12 - Flashback au 
Forum 
326 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:39:13 14:39:13 x 


Forum 


- Sidan 12 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: Source: 
Tegan 16 16:33:45(UTC+ KnowledgeC 

undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Senica 
12 - Flashback an Identifier: 
Forum 

327 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:39:13 14:39:13 E 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-18 Artifact Family: Source: 
sa NG 16:36:15(UTC+ KnowledgeC 
undbyberg 1 ; Account: 

feb 2021 - Sidan Source Ropository Service 

12 - Flashback an: Identifier: 

Forum 

328 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 14:40:16 14:40:16 a 
- Flashback Forum 


- Sidan 2 - Flashback 


Skottlossning https://www .flashback.org/t3305870 2021-02-19 1 Artifact Family: Source: Safari 
d NG 01:19:43(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - ) Source Repository Identifier: 
Flashback Path: 
Forum 
329 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:40:17 14:40:17 a 


Forum 


Skottlossning 


https://www .flashback.org/t3305870p2 


2021-02-19 
1 :19:45(UTC+ 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 13 - Flashback 
Forum 


Evidence 


2023-10-20 


14:40:17 


2023-10-20 
14:40:17 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-19 1 Artifact Family: Source: Safari 
Hr T 01:19:47 (UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan Source Repository | Identifier: 
13 - Flashback Path: 
Forum 
331 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:40:18 14:40:18 * 


- Sidan 13 - Flashback 
Forum 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
13 - Flashback 
Forum 


https://www.flashback.org/t3305870p13 


2021-02-19 
4 :19:50(UTC+ 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
3 


| WED History Skottiossning Tulegatan ¡Evidence ZUZ3-TU-ZU | 
Sundbyberg 16 feb 2021 14:40:18 
- Sidan 12 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: Source: Safari 
Ur ea NG 01:20:01(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan ) Source Repository Identifier: 
12 - Flashback Path: 
Forum 
333 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:40:19 14:40:19 S 
- Sidan 12 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: Source: 
k 01:20:05(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository "Service 
12 - Flashback am. Identifier: 
Forum 
334  |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:40:20 14:40:20 = 
- Sidan 12 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: Source: 
Tegan NG 01:41:05(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository | Service 
12 - Flashback ath: Identifier: 
Forum 
335 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:40:23 14:40:23 a 
- Sidan 13 - Flashback 
Forum 
Skottlossning https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: Source: Safari 
De he 01:41:17(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan ) Source Repository | identifier: 
13 - Flashback Path: 
Forum 
336 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:40:24 14:40:24 * 
- Sidan 13 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: Source: 
01:41:20(UTC+ KnowledgeC 
1) Source Repository Account. 

13 - Flashback Path: Identifier: 

Forum 


2023-10-20 
14:40:25 


2023-10-20 
14:40:25 


Web History Skottlossning Tulegatan |Evidence 
Sundbyberg 16 feb 2021 
- Sidan 13 - Flashback 


Forum 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: Source: 

Tulegatan T a :55:35(UTC+ KnowledgeC 
undbyberg ; Account: 

feb 2021 - Sidan Source Repository | Service 

13 - Flashback ath: Identifier: 

Forum 


quattro, Svart / 519hk på 14:53:22 14:53:22 
Biluppgifter.se 


2013 Audi S8 https://biluppgifter.se/fordon/TYK689 2021-02-19 Artifact Family: Source: Safari 
4.0 TFSI quattro, 02:26:19(UTC+ Account: 


338 |Web History 2013 Audi S8 4.0 TFSI | Evidence 2023-10-20 2023-10-20 E 


Svart / 519hk pá 1 ; Service 
Biluppgifter.se Source Repository | identifier: 
Path: 
339 |Web History 2013 Audi S8 4.0 TFSI | Evidence 2023-10-20 2023-10-20 
quattro, Svart / 519hk på 14:53:24 14:53:24 
Biluppgifter.se 
2013 Audi S8 https://biluppgifter.se/fordon/TYK689#agare 2021-02-19 Artifact Family: Source: Safari 
40 TFSI quattro, 02:26:21(UTC+ Account: 
va pa 1 : Service 
Biluppgifter.se Source Repository detter: 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
34 


m 
(Partille, 27 år) - 
Merinfo.se 


[Web History 


Evidence 


Kim Mats Bo https://www.merinfo.se/person/Partille/Kim-Mats- | 2021-02-19 il Artifact Family: Source: Safari 
Be (Partille, Po Nyman I dan Gas ` 02:26:23(UTC+ Account: 
7 år) - a?utm source=biluppgifter&utm mediumzo | 1 B Service 
Merinfo.se wner&utm_term=person ) pours Repository Identifier: 
341 |Web History Kim Mats Bo Nyman Evidence 2023-10-20 2023-10-20 
ans, 27 ar) - 14:53:30 14:53:30 = 
erinfo.se 


Kim Mats Bo https://www.merinfo.se/person/Partille/Kim-Mats- | 2021-02-19 Artifact Family: Source: 
Bia (Partille, Po Mymang133s/byp Sh. — à 02:26:25(UTC+ KnowledgeC 
7 ar) - a?utm_source=biluppgifter&utm_medium=o | 1 ` Account: 
Merinfo.se wner&utm term=person ) Source Repository Service 
an: Identifier: 
342 |Web History 2013 Audi S8 4.0 TFSI | Evidence 2023-10-20 2023-10-20 
quattro, Svart / 519hk på 14:53:34 14:53:34 = 
Biluppgifter.se 


2013 Audi S8 https://biluppgifter.se/fordon/TYK689#agare 2021-02-19 Artifact Family: Source: 
Se Use 02:26:25(UTC+ KnowledgeC 
va på 1 ; Account: 
Biluppgifter.se Bau Repository Service 
ain. Identifier: 
343 |Web History Evidence 2023-10-20 2023-10-20 
14:53:55 14:53:55 = 


https://www.merinfo.se/search?ae6=Nedre%20Fu | 2021-02-19 1 Artifact Family: Source: Safari 

jen Ned Pu Naa I d 02:26:35(UTC+ Account: 

=Partille&d=p 1) : Service 
Salg Repository, Identifier: 

344 |Web History https://www.merinfo.se/s | Evidence 2023-10-20 2023-10-20 
earch?ae6=Nedre%20Fu 14:53:56 14:53:56 * 
ruskogsvägen%204%20I 
deele 

Ep 


https://www.meri |https://www.merinfo.se/search?ae6=Nedre%20Fu | 2021-02-19 


nfo.se/search?a 
e6=Nedre%20Fu 
ruskogsvågen% 
2049620lgh96202 
202&ae4=Partill 
e&d- 


ruskogsv?6C396A4gen9620496201gh96202202&ae 
4-Partille&d-p 


345 |Web History 


02:26:40(UTC+ 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Flashback Forum 


Evidence 


Artifact Family: Source: 
KnowledgeC 
Account: 
Service 


Source Repository 
h: Identifier: 


Pati 


2023-10-20 
14:54:48 


2023-10-20 
14:54:48 


Skottlossning 


Flashback 
Forum 


https://www .flashback.org/t3305870 


2021-02-19 
14:11:23(UTC+ 
1) 


Artifact Family: Source: Safari 
Account: 
Service 


Source Repository Identifier: 


Path: 


Web History 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 13 - Flashback 
Forum 


Evidence 


2023-10-20 
14:54:49 


2023-10-20 
14:54:49 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-19 1 Artifact Family: Source: Safari 
U 16 14:11:24(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan ) Source Repository | identifier: 
13 - Flashback ath: 
Forum 
347 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:54:49 14:54:49 a 


- Sidan 13 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: Source: 
Ts "s 14:11:25(UTC+ KnowledgeC 

undbyberg 1 ; Account: 
feb 2021 - Sidan Source Repository. Service 
13 - Flashback am: Identifier: 
Forum 

348 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:54:50 14:54:50 * 


- Sidan 12 - Flashback 
Forum 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 245 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-19 1 Artifact Family: Source: 
Me dra ie 14:11:48(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan Source Repository | Identifier: 
12 - Flashback Path: 

Forum 


349  |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 14:54:50 14:54:50 a 
- Sidan 12 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p12 2021-02-19 Artifact Family: Source: 
Tulegann RP 14:11:50(UTC+ KnowledgeC 
undbyberg 1 ; Account: 
feb 2021 - Sidan | Source Repository | Service 
12 - Flashback an: Identifier: 
Forum 
Web History Google Översätt Evidence 2023-10-20 2023-10-20 
14:57:02 14:57:02 


Google Översätt |https://translate.google.com/?sl=sv&tl=en&text=gr | 2021-02-19 Artifact Family: Source: Safari 
abbarna%20ska%20%C3%A5ka%20ditt%20igen | 14:47:00(UTC+ Account: 
%200ch%20knacka%20p%C3%A5%20d%C3%B | 1) s R it Service 
6rren%200m%20han%20%C3%A4r%20d%C3% Path P| Identifier: 
A4r%20d%C3%A5%20ta%20med%20honom%2 anr 
O&op-translate 


Web History Google Óversátt Evidence 2023-10-20 2023-10-20 
14:57:25 14:57:25 
Google Oversatt |https://translate.google.com/ 2021-02-19 Artifact Family: Source: Safari 
14:46:23(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
Web History Google Översätt Evidence 2023-10-20 2023-10-20 
14:58:20 14:58:20 
Google Översätt |https://translate.google.com/?sl-sv&tl-en&op-tra | 2021-02-19 Artifact Family: Source: Safari 
nslate 14:48:34(UTC+ Account: 
1) ; Service 
Source Repository Identifier: 
353 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:01:01 15:01:01 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-19 Artifact Family: Source: Safari 
megan 46 16:04:23(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - ) Source Repository |, dentifier: 
Flashback Path: 
Forum 
354 [Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:01:03 15:01:03 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-19 Artifact Family: Source: 
Tulegatan 1 16:04:25(UTC+ KnowledgeC 
Sundbyberg 5 1) Source Repository Account 
Flash Path: far 

ashback Identifier: 
Forum 


355 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 
Sundbyberg 16 feb 2021 15:01:04 
- Sidan 13 - Flashback 


Forum 


2023-10-20 
15:01:04 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-19 Artifact Family: Source: Safari 
Ude ra NG He :04:33(UTC+ Account 
unabyberg ; ervice 

feb 2021 - Sidan | Source Repository | identifier: 

13 - Flashback Path: 

Forum 

356 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:01:04 15:01:04 * 
- Sidan 13 - Flashback 
Forum 


Bilaga. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


246 


i Stockholm - 
uppdaterade priser för 


Ims 7 WWW .Tasnback-org/t33U587Up T3 2021-02-19 Artüract Family: 
an NG 16:04:35(UTC+ 
undbyber 

feb 2021 - Sidan » Source Repository 

13 - Flashback Path: Identifier: 

Forum 

357 |Web History Courtyard by Marriott Evidence 2023-10-20 2023-10-20 

Stockholm Kungsholmen 15:02:54 15:02:54 * 


Courtyard by https://www.booking.com/hotel/se/courtyard- 2021-02-20 1 Artifact Family: Source: Safari 
Marriott stockholm.sv.html?label=gen173nr- 01:19:57(UTC+ Account: 
Stockholm 1DCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA | 1) 4 Service 
Kungsholmen i 7 |EN2AED6AEBiAIBgAlDuALugsGBBsACAdICJDg Source Repository | Identifier: 
Stockholm — | 5NzdhNGJILWQzYTYtNDE0OS1iYWIwLWNmZD Path: 
uppdaterade dkNWRkYZMOM9gCBOACAQ:sid=cb602dccc0a7 
priser för 2021 |647ccb33ac1440501f9ajall sr blocks=17260306 

246421916 0 2 0; checkin=2021-02- 

19;checkout=2021-02- 

20:dest id=1 324;dest type=district;dist=0;group ` 

adults=2;group children=0;hapos=1;highlighted ` 

blocks=17260306 246421916 0 2 0;hpos=1;ma 

tching block id=17260306 | 246421916 0 2 0; n 

oc alles 1;ref_is_wl=1;room1=A%2CA;sb_ price 

pe=total;sr - order-popularity; sr pri blocks=17 

200306 | 246421916 0 2 0 80300; srepoch-16 

13780374;srpvid=6fb1024af9220203;type=total;u 

cfs=18 

358 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:03:54 15:03:54 = 
- Flashback Forum 


- Sidan 13 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-20 1 Artifact Family: Source: Safari 
Halata fe 1 5:13:59(UTC+ Account 
unabyberg ; ervice 
feb 2021 - i Source Repository | Identifier: 
Flashback ath: 
Forum 
359 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:03:55 15:03:55 e 


- Sidan 13 - Flashback 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-20 Artifact Family: Source: Safari 
de ee 16 15:14:00(UTC+ Account: 
undbyberg 1 ; Service 
feb 2021 - Sidan ) Source Repository | Identifier: 
13 - Flashback Path: 
Forum 
360 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:03:56 15:03:56 + 


Forum 


- Sidan 13 - Flashback 


Skottlossning _| https://www.flashback.org/t3305870p13 2021-02-20 Artifact Family: Source: 
megan pa 15:14:05(UTC+ KnowledgeC 

undbyberg 1 ; Account: 
feb 2021 - Sidan l Source Repository | Servica 
13 - Flashback an Identifier: 
Forum 

361 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:03:56 15:03:56 a 


Forum 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
13 - Flashback 
Forum 


https://www.flashback.org/t3305870p13 


2021-02-20 
15:41:45(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: 
KnowledgeC 
Account: 
Service 
Identifier: 


362 


Web History 


STF af Chapman & 
Skeppsholmen i 
Stockholm — 
uppdaterade priser för 


Evidence 


15:05:21 


2023-10-20 


2023-10-20 
15:05:21 


Bilaga 1. Calls mm, 2023- d -01 14:47 diarienr: 5000-K189802-21 


WWW. 2021-02-20 it Artiract Family: Source Sara 
& Skeppsholmen chapman. sv. htmi?label= gen173nr- 23:07:55(UTC+ Acco! nt HEMLIG 
i Stockholm — 1DCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA | 1) s R it Servite 
uppdaterade EN2AED6AEBiAIBgAIDuALPjcaBBsACAdICJDE pal epository | Identifier: 
priser för 2021 |5NTY1Mzg0LWIWODctNDE0My04N2ZhLTZjMG ath: 
MyYjg2MTU2ZtgCBOACAQ&sid=cb602dccc0a76 
47ccb33ac1440501f9a&all_sr_blocks=29772913_ 
91471534 1 2 O&checkin=2021-02- 
20&checkout-2021-02-21&dest id-- 
2524279&dest type-city&group adults-1&group 
children=0&hapos=53&highlighted blocks=2977 
2913 91471534 1 2 O&hpos-13&no rooms-1& 
req adults=1&req children=0&room1=A&sr orde 
r=popularity&sr pri blocks=29772913 91471534 
120 24299&srepoch=1613858753&srpvid=9 
0a29b602565015a8ucfs= 18matching_block_id=2 
9772913 91471534 1 2 O&srhp=1&ref is wii 
363  |Web History scandic stockholm - Sök |Evidence 2023-10-20 2023-10-20 
pa Google 15:05:26 15:05:26 a 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
scandic https://www.google.se/search?q=scandic+stockh | 2021-02-20 1 Artifact Family: Source: Safari 
stockholm - Sök |olm&ie=UTF-8&0e=UTF-8&hl=sv-se&client=safari | 23:08:44(UTC+ Account: 
pa Google 1) ; Service 
Source Repository Identifier: 
364 |Web History radisson blu - Sök på Evidence 2023-10-20 2023-10-20 
Google 15:05:33 15:05:33 a 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
radisson blu - https://www.google.se/search?q=radisson+blu&ie | 2021-02-20 1 Artifact Family: Source: Safari 
Sök på Google |=UTF-8&0e=UTF-8&hl=sv-se&client=safari 23:09:36(UTC+ Account: 
1) ; Service 
Source Repository, Identifier: 
365 |Web History First Hotel Kungsbron Evidence 2023-10-20 2023-10-20 
15:05:37 15:05:37 + 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
First Hotel https://www.google.se/travel/hotels/first20hotel/ | 2021-02-20 d Artifact Family: Source: Safari 
Kungsbron entity/Cgoltgzg0uXh2uUNBEAE?g21b-2502548,25 | 23:09:55(UTC+ Account: 
03781,2503839,4258168,4306835,4308227,4317 | 1) s B ; Service 
915,4328159,4371335,4401769,4419364,446366 Pathe epository | identifier: 
6,4466980,4482194 4482438 4486153,4491350, au. 
4495816,4496891,4503422,4270859,4284970&hl 
=SV- 
SE&gl-se&ap-aAE&grf-ErEBCiwIDhloEiZyJCoi 
Cgcl5Q8QAxgOEgcl5Q8QAxgPIAAwHKDKAKOH 
COUPEAIYFBIKCAcoAToEOglgARIPCAgoAToH 
QgU18j4YAUABEgslEygCOgWaAQIIARoLCBMS 
BwoFmgECCAEaAggOGklIBxIOCgw6CgoDCNIG 
GgNTRUsSDgoMOgoKAwiaCBoDUOVLEg4KDD 
oKCgMl4gkaA1NFSxlOCgw6CgoDCKoLGgNTR 
UsiAiAB&q=firstthotel&rp=ELas4NLI4drjQRCHzI 
Puhoi35ssBEKyB6YaBoNK47gEQ2K- 
04 HtoMPMATgCQAFIA6IBCVNOb2NraG9sbcA 
BA8gBAA&ictx=1&ved=2ahUKEwi1xbydvfnuAhXI 
T8AKHQUnBQoQvS4wAHoECAMQHQ 
366 |Web History First Hotel Kungsbron Evidence 2023-10-20 2023-10-20 
15:06:10 15:06:10 A 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
First Hotel https://www.google.se/travel/hotels/first%20hotel/ | 2021-02-20 1 Artifact Family: Source: Safari 
Kungsbron entity/Cgoltqzg0uXh2uNBEAE ?g21b=2502548%2 | 23:10:24(UTC+ Account: 
C2503781%2C2503839%2C4258168%2C43068 | 1) s R 5 Service 
35%2C4308227%2C4317915%2C4328159%2C4 Baa epository | Identifier: 
371335%2C4401769%2C4419364%2C4463666 an: 
%2C4466980%2C4482194%2C4482438%2C448 
6153%2C4491350%2C4495816%2C4496891%2 
C4503422%2C4270859%2C4284970&hl=sv- 
SE&gl=se&ap=aAE&q=first%20hotel&rp=ELas4N 
Ll4drjgRCHziPuhoi35ssBEKyB6YaBoNK47gEQ2 
K- 
04 HtoMPMAaIBCVNOb2NraG9sbTgBQAFIAw&i 
ctx=1&sa=X&utm_campaign=sharing&utm_mediu 
m-link&utm source-htls&ts-CAESABozChUSET 
oPbsOkcmEgU3RVY 2tob2xtGgASGhIUCgcl5Q8 
QAxgOEgcl5Q8QAxgPGAEyAhAAKg8KCygBSgl 
gAToDUOVLGgA 
367  |Web History E-post - mahad alii - Evidence 2023-10-20 2023-10-20 
Outlook 15:06:58 15:06:58 > 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 
E-post -mahad  |https://outlook.live.com/mail/O/inbox 2021-02-20 1 Artifact Family: Source: Safari 
alii - Outlook 23:31:19(UTC+ Account: 
1) ; Service 
Source Repository | Identifier: 
368 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:08:14 15:08:14 * 
- Flashback Forum 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 


80 


- Sidan 13 - Flashback 
Forum 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 248 

Skottl T [TTIps7/WWW.TIasnDack.org/t33U587U 2021-02-21 1 Aruract Family: Sourq 
De 46 02:35:39(UTC+ Acco 

undbyberg 1 : Servid 
feb 2021 - | Source Repository | Identifier: 
Flashback Path: 
Forum 

369  |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 15:08:15 15:08:15 * 


Skottlossning 
Tulegatan 
Sundbyberg 16 
feb 2021 - Sidan 
13 - Flashback 
Forum 


Web H 


https://www.flashback.org/t3305870p13 


istory 


2021-02-21 
al, 


Skottlossning Tulegatan 
Sundbyberg 16 feb 2021 
- Sidan 13 - Flashback 
Forum 


Evidence 


Artifact Family: 


Source Repository 
Path: 


2023-10-20 
15:08:15 


Source: Safari 
Account: 
Service 
Identifier: 


2023-10-20 
15:08:15 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-21 Artifact Family: Source: 
46 02:35:45(UTC+ KnowledgeC 
undbyberg 1 ; Account: 

feb 2021 - Sidan Source Repository | Service 

13 - Flashback ath: Identifier: 

Forum 

371 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 15:09:22 15:09:22 = 
- Flashback Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-21 1 Artifact Family: Source: Safari 
Tulegatan " 03:38-19(UTOE Account: 
undbyberg ; ervice 

feb 2021 - | Source Repository | Identifier: 

Flashback ath: 

Forum 

372 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 

Sundbyberg 16 feb 2021 15:09:23 15:09:23 a 
- Flashback Forum 


- Sidan 13 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870 2021-02-21 Artifact Family: Source: 
E NG 03:36:20(UTC+ KnowledgeC 

un er , å 
feb 2031 S g 1) Source Repository Account 
Flashback Path: Identifier: 
Forum 

373 |Web History Skottlossning Tulegatan |Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:09:24 15:09:24 a 


- Sidan 13 - Flashback 
Forum 


Skottlossning https://www.flashback.org/t3305870p13 2021-02-21 1 Artifact Family: Source: Safari 
UA fe pe se SOLER Account: 
undbyberg ; Service 
feb 2021 - Sidan Source Repository | Identifier: 
13 - Flashback Path: 
Forum 
374 |Web History Skottlossning Tulegatan | Evidence 2023-10-20 2023-10-20 
Sundbyberg 16 feb 2021 15:09:25 15:09:25 i 


Skottlossning ^ |https://www.flashback.org/t3305870p13 2021-02-21 Artifact Family: Source: 
[Une 16 03:36:35(UTC+ KnowledgeC 
undbyberg 1 ; Account: 

feb 2021 - Sidan | Source Repository || Service 

13 - Flashback am: Identifier: 

Forum 

375 |Web History Efterlyst 2021 Evidence 2023-10-20 2023-10-20 

skottlyssning 15:11:37 15:11:37 a 
stundbyberg - YouTube 


Efterlyst 2021 https://m.youtube.com/results?sp-mAEA8search | 2021-02-21 1 Artifact Family: Source: Safari 
So and _query=Efterlyst+2021+skottlyssning+stundbyber | 03:37:42(UTC+ Account: 
stundbyberg - g 1 ; Service 
YouTube | Source Repository | Identifier: 
Path: 
376 [Web History Google Óversátt Evidence 2023-10-20 2023-10-20 
15:13:20 15:13:20 5 


oo 


a 


Bilaga e Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
2021-02-21 
1 y :10:56(UTC+ 


[httpsz/iransrate.googie.se/ ?hi-sv 


Artiract Family: 


Source Repository 
Path: 


Identifier: 


Web History 


Google Oversatt 


2023-10-20 


15:13:25 


2023-10-20 
15:13:25 


Google Oversatt 


https://translate.google.se/?hl-sv&sl-auto&tl-en& 
text=guys%20have%20info%20about%20he%20f 
arah%20fick%20h%C3%B6ra%20att%20han%20 
och%20hans%20v%C3%A4nner%20%C3%A4r% 
20i%20krig%20mot%20n%C3%A5rgra%20andra 

%20som%20bor%20i%200m%C3%A5rdet%20mi 
na%20v%C3%A4nner%20k%C3%A4nner%20de 
ssa%20killar%20tror%20att%20de%20kan%20ta 

%20fram%20farah%20men%20de%20%C3%A4r 
%20inte%20100%25%20leta%20efter%20ni%20 

ET NN SAL a a at 
anslate 


2021-02-21 
11:11:24(UTC+ 
1) 


Artifact Family: 


Source Repository 
Path: 


Source: Safari 
Account: 
Service 
Identifier: 


Web History 


Google Oversatt 


Evidence 


2023-10-20 


15:13:26 


2023-10-20 
15:13:26 


Google Översätt |https://translate.google.se/?hl=sv&sl=auto&tl=en& | 2021-02-21 il Artifact Family: Source: Safari 
op=translate 11:18:25(UTC+ Account: 
1) Å Service 
Source Repository Identifier: 
379 |Web History Hyra bil - Boka hyrbil Evidence 2023-11-01 2023-11-01 
direkt på nätet | Hertz 11:12:01 11:12:01 + 
Biluthyrning 


Hyra bil - Boka  |https://www.hertz.se/rentacar/reservation/?gclid= | 2021-02-23 1 Artifact Family: Source: Safari 
hyrbil direkt på ` |EAlalQobChMI9Me@8eH- 01:39:48(UTC+ Account: 
nátet | Hertz 7gIVj5KyCh3PRAh9EAAYASAAEgLND D BweE8 | 1) : Service 
Biluthyrning gclsrc=aw.ds#vehicles poe Repository Identifier: 
380 |Web History Hyra bil - Boka hyrbil Evidence 2023-11-01 2023-11-01 
direkt pa natet | Hertz 11:13:49 11:13:49 B 
Biluthyrning 


Hyra bil - Boka  |https://www.hertz.se/rentacar/reservation/?gclid= | 2021-02-23 1 Artifact Family: Source: Safari 
hyrbil direkt på | EAlalQobChMI9MeQ8eH- 01:37:11(UTC+ Account: 
nátet | Hertz 7glVj5KyCh3PRAh9EAAYASAAEgLND_D_BwEß | 1) R : Service 
Biluthyrning gclsrc=aw.ds Source epository Identifier: 
381 |Web History sixt - Sök på Google Evidence 2023-11-01 2023-11-01 
11:14:21 11:14:21 a 
sixt - Sök på https://www.google.se/search?client=safari&chan | 2021-02-23 d Artifact Family: Source: Safari 
Google nel=iphone bm&source-hp&ei- 040YKrvBobSk | 01:40:36(UTC+ Account: 
wXK1764Dg&q-sixt&gs ssp=eJzj4tTP1TcwyTY1 | 1) s R it Service 
NFJgNGBOYPBiKc6sKAEAMyUE79&oq-six&gs | ource Repository | Identifier: 
cp-ChFtb2JpbGUtZ3dzLXdpei1ocBABGAAyDgg Path: 
uELEDEMcBEKMCEJMCMggILhDHARCvATIFC 
C4QsQMyCAguEMcBEK8BMglIILjIFCAAQsQMyB 
QgAELEDMgUILhCxAzoOCCkQsQMQxwEQowl 
QkwI6BQgpELEDOgUIKRCgAToCCCK6DQgpE 
McBEKMCEEMQkwl6CwgpEMcBEK8BEJMCOg 
YIKRAWEB46CAgAELEDEIMBOg4ILhCxAxCDA 
RDHARCjAjoLCCAQsQMQxwEQowl6CwguELED 
EIMBEJMCOgIIADoLCC4QsQMQxwEQrwFQjRN 
Y8BhgwCVoAHAAeACAAdgBiAGBBJIBBTAuMi4 
xmAEAoAEBSAEP&sclient=mobile-gws-wiz-hp 
382 |Web History Offerselect Evidence 2023-11-01 2023-11-01 
11:14:25 11:14:25 å 


Offerselect https://www.sixt.se/php/reservation/offerselect 2021-02-23 Artifact Family: Source: 
01:46:20(UTC+ KnowledgeC 
D Source Repository Account 
Path: Identifier: 
383 |Web History Car Rental - Renta new | Evidence 2023-11-01 2023-11-01 
Car & Van Worldwide | 11:17:08 11:17:08 + 
Europcar 


Car Rental - https://www.europcar.com/en- 2021-02-23 1 Artifact Family: Source: Safari 
an 7g yCh1yEw gJJcvD BwE | 1 a Service 
Worldwide | &gclsrc=aw.ds | Source Repository Identifier: 
Europcar Path: 
384 |Web History Select extras | Europcar |Evidence 2023-11-01 2023-11-01 
11:17:13 11:17:13 = 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Selec MUps://M.g8Uuropcar.com/action/aduExtras 2021-02-23 1 Artiract Family: Source Sata 
Europe 03:22:42(UTC+ Acco 
1) Source Repository Servite HEMLIG 
Path: Identifier: 
385 |Web History Hyra Bil Snabbt pa Natet | Evidence 2023-11-01 2023-11-01 
- Hyrbil till ett Bra Pris — 11:18:41 11:18:41 a 
Avis 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 
Hyra Bil Snabbt |https://www.avis.se/?kpid=site-google_camp- 2021-02-23 1 Artifact Family: Source: Safari 
på Nätet - Hyrbil |1848901830 adgroup-69500277533 target-aud- | 03:35:37(UTC+ Account: 
till ett Bra Pris — |531416943069:kwd-13402896 creative- 1) 3 Service 
Avis 346475790704. device-m feed- Source Repository | Identifier: 


&gclid-EAlalQobChMIx4WTrvz- 
7glVw9myCh11eglcEAAYASAAEgJsr_D_BwE 


Path: 


386 |Web History Tillgángliga fordon Evidence 2023-11-01 2023-11-01 
11:18:54 11:18:54 = 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 
Tillgangliga https://secure.avis.se/car- 2021-02-23 Artifact Family: Source: 
fordon results ?vehicleCategory=default&exclusiveSearc | 03:36:45(UTC+ KnowledgeC 
h=&fccFallBackAwdCode=&fccRecg=&fromSRP= | 1) 3 Account: 
&require-mobile- Source Repository | Service 
logout=&partnerBrand=&locationBrand=avis&dro Path: Identifier: 
pLocationBrand=&budgetPickupLocCode=&budg 
etDropoffLocCode=&hire-country=GB&hire- 
search=Stockholm+Bromma+flygplats+- 
* SWE&hire-locationzBMA&station- 
type=airport&date- 
from=23%2F02%2F2021&time-from=1500&time- 
from-hours=15&time-from-minutes=00&return- 
search=&return-location=&return-station- 
type=airport&date-to=28%2F02%2F2021&time- 
to=1500&time-to-hours=15&time-to- 
minutes=00&hideAwdNumber=false&loactionRe 
markList=&hideAwdCodeAndMessage=false&yds 
applicable=1&dd=&yy=&mm=&awdcode=&rental 
Period=5&driverDob=&isUasorSds= 
387 |Web History Booking.com : Hotell i Evidence 2023-11-01 2023-11-01 
Karlstad . Boka hotell nu! 13:30:11 13:30:11 a 
Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 
Booking.com : https://www.booking.com/searchresults.sv.html?s | 2021-02-25 1 Artifact Family: Source: Safari 
Hotell i Karlstad . | rc=index&rows=20&error_url=https%3A%2F %2F 11:00:47(UTC+ Account: 
Boka hotell nu! | www.booking.com%2Findex.sv.html%3Flabel%3_ | 1) 3 Service 
Dgen173nr- Source Repository identifier: 


1DCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA 
EN2AEDGAEBIAIBgAIDuAKIGt2BBsACAdICJDJj 
NjQzMTEyLTIKYWUtNDYzOC1iMDImLTU3Y2Ez 
OWZjNmM4NtgCBOACAQ%3Bsid%3Dcb602dcc 
c0a7647ccb33ac1440501f9a%3Bsb_price_type% 
3Dtotal%26%3B&label=gen173nr- 
1DCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA 
EN2AEDGAEBIAIBgqAIDuAKIGt2BBsACAdICJDJj 
NjQzMTEyLTIKYWUtNDYzOC1iMDImLTU3Y2Ez 
OWZjNmM4NtgCBOACAQ&sid=cb602dccc0a764 
7ccb33ac1440501f9a&sb=1&sb_lp=1&search_for 
m_id=cec84653387b0036&checkin_monthday=2 
5&checkin_year_month=2021- 
2&checkout_monthday=26&checkout_year_mont 
h=2021-2&checkin=2021-02-25&checkout=2021- 
02- 
26&group_adults=4&group_children=0&no_room 
s=2&group adults overlay=4&group children ov 
erlay=0&no rooms overlay=2&lpsr=1&dest type 
=city&dest id=- 
2493635&ss raw=kar&ss label=Karlstad%2C+V 
%C3%A4rmland%2C+Sverige&place id lon=13. 
500731&place id lat=59.379671&ac position=0 
&ac suggestion list length=5&ac langcode=sv& 
search selected=true&ac size=5&ac click type= 
b&latitude=59.37967 1 &longitude=13.500731&sea 


rch_pageview_id=cec84653387b0036 


Path: 


388 |Web History Best Western Gustaf Evidence 2023-11-01 2023-11-01 
Froding Hotel & 13:30:14 13:30:14 a 
Konferens i Karlstad — 
uppdaterade priser för 
2021 
Title URL Last Visited | Visits | Usage Pattern Additional info Source Info Deleted 
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Best 
Gustaf Froding 
Hotel & 


Bilaga 1. Calls mm, 2023-11-01 14:47 diarienr: 5000-K189802-21 
11:01:20(UTC+ 
1) 


TIWWW. Ing. -W - 
gustaf-froding-hotell- 
konferens.sv.html?label=gen173nr- 


Artiract Family: 


Source Repository 


Konferens i 1DCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA Path: Service 

Karlstad — EN2AED6ABBIAIBgAIDUAKI6t2BBSACAdICJDJj ath: Identifier: 

uppdaterade NjQZzMTEyLTIKYWUINDYZOC1iMDIMLTU3Y2EZ 

priser för 2021 | OWZjNmM4NtgCBOACAQ;sid=cb602dccc0a764 
7ccb33ac1440501f9a;all sr blocks=1843619 26 
4821228 2 1 0%2C1843619 264821228 21. 

O;checkin=2021-02-25;checkout=2021-02- 
26;dest_id=- 
2493635;dest type=city;dist=0;group adults=4;gr 
oup children=0;hapos=4;highlighted blocks=184 
3619 264821228 2 1 0%2C1843619 2648212 
28 2 1 O;hpos-4;matching block id=1843619 ` 
264821228 2 1 0;no rooms-2;ref is wl=1;req - 
adults=4;req_children=0;room1=A%2CA;room2= 
A%2CA;sb_price_type=total;sr_order=popularity; 
srepoch=1614247247;srpvid=a9644667bb1b0080 
;type=total;ucfs=1& 
389 |Web History Bekråftelse : Evidence 2023-11-01 2023-11-01 
Booking.com 13:30:18 13:30:18 = 

Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted 

Bekräftelse : https://secure.booking.com/confirmation.sv.html?l | 2021-02-25 Artifact Family: Source: 

Booking.com abel=gen173nr- 8 11:06:50(UTC+ KnowledgeC 
1DCAEoggl46AdIM1gEaMgBiAECmAEIUAEHyA | 1) s Ri d Account: 
EN2AED6AEBIAIBGAIDuAKI6t2BBSACAdICJDJj Pi epository | Service 
NjQzMTEyLTIKYWUtNDYzOC1iMDIMLTU3Y2Ez ath: Identifier: 
OWZjNmMA4NtgCBOACAQ; sid=cb602dccc0a764 
7ccb33ac1440501f9a;auth key=rZPn3J4Y3F3Ag 
Qn2;bp travel purpose=leisure;hostname=www. 
booking.com;source=book;ua created-0& 

390 |Web History Bekråftelse - Evidence 2023-11-01 2023-11-01 
Booking.com 13:32:48 13:32:48 * 

Title URL Last Visited Visits Usage Pattern Additional info Source Info Deleted | 

Bekräftelse - https://secure.booking.com/confirmation.sv.html?l | 2021-02-25 1 Artifact Family: Source: Safari 

Booking.com abel=gen173nr- 11:06:42(UTC+ Account: 
1DCAEoggl46AdIM1gEaMgBiAECmAEIuAEHyA | 1 : Service 
ENZAEDGAEBIAIBAAIDUARIGTZBBSACAGICHDN] | ) Source Repository | identifier: 
NjQZMTEyLTIkYWUtNDYZOC1iMDImLTU3Y2Ez au 
OWZjNmMA4NtgCBOACAQ; sid=cb602dccc0a764 
7ccb33ac1440501f9a;auth key=rZPn3J4Y3F3Ag 
Qn2;bp travel purpose=leisure;hostname=www. 
booking.com;source=book;ua created=0& 

391  |Documents 11BEBE49-2BDF-4872- |Evidence 2023-11-01 2023-11-01 
8D8B- 13:42:38 13:42:38 = 
8CA0A61AF690.pdf 
File Info Additional file info Deleted | 
Name: 11BEBE49-2BDF-4872-8D8B- Size (bytes): 200720 
EE Created: 2021-02-18 16:34:10(UTC+1) 
Path: 373fd2e35eced361b8ff2ca4a54ab4207fa933 PRIN VU 
45 files full.zip/private/var/mobile/Container Modified: 2021-02-18 16:34:10(UTC+1) 
s/Data/Application/06B4B7A0-A991-4F2E- Accessed: 2021-02-18 16:34:10(UTC+1) 
B94A-D6285790191B/tmp/11BEBE49-2BDF- 
4872-8D8B-8CA0A61AF690.pdf 
MD5: fde4b53024c5eba28216eebe8931e2f7 
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252 


@ 


Extraction Report - Apple iOS Full File system 


' Cellebrite 


www.cellebrite.com 


Data Files (79) 


Images (79) 
# File Info Additional file info Thumbnail | Deleted | 
1 | Name: IMG_0012.PNG Size (bytes): 355811 en 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-13 18:54:32(UTC+1) == 
4207fa93345 files full.zip/private/v VE Ge == 
ar/mobile/Media/DCIM/100APPLE/I | Modified: auae IA MÅ 
MG 0012.PNG Accessed: 2021-02-13 18:54:32(UTC+1) = 
MD5: 840e6aa3ef50750f477e00997ffd9b | Source file 373fd2e35eced361b8ff2ca4a54ab 
5e 4207fa93345 files full.zip/private/v === s 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0012.PNG : 0x0 (Size: 355811 
bytes) 
? | Name: IMG_0014.PNG Size (bytes): 570799 = 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-13 20:32:37(UTC+1) 
4207fa93345_files_full.zip/private/v Han: “29. 
ar/mobile/Media/DCIM/100APPLE/ | Modified: 2021-02-13 20:32:37 (UTC 1) 
MG 0014.PNG Accessed: 2021-02-13 20:32:37(UTC+1) 
MD5: 3d9f6d0155703abdd900b9834cd9 | Source file 373fd2e35eced361b8ff2ca4a54ab | i. e 
9b1e 4207fa93345_files_full.zip/private/v | * — * 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0014.PNG : 0x0 (Size: 570799 
bytes) 
3 Name: 9245822445086699840 Size (bytes): 72097 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 16:37:57(UTC+1) 
4207fa93345_files_full.zip/private/v d A 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 16:37:57(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-16 16:46:03(UTC+1) 
O a Source NIB 373fd2e35eced361b8ff2ca4a54ab 
nap.file_manager_3_SCContent_ca 42 a à A 
Er sonen DS SIN 
ar 
len 0n/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
MD5: 6e634e6bb6c96333ab47e4ace120 nap.file_manager_3_SCContent_ca 
5b53 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/9245822445086699 
840 : 0x0 (Size: 72097 bytes) 
Meta Data: 
Pixel resolution: 750x998 
Orientation: Horizontal (normal) 
4 Name: 6357297960555303251 Size (bytes): 43357 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 16:37:59(UTC+1) 
4207fa93345_files_full.zip/private/v TN EE) 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 16:37:59(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-16 16:50:00(UTC+1) 
ee | Source fs 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager 3 SCContent ca : å : 
10df2d-08df-4a1c-b8fe- d a SCH | Paa aa parey 
ar/mobile/Containers/Data/Applicati 
36109f9b03d/6357297 960555303 0n/77919778-DC8B-4FED-9F7E. 
0DB1B276E89C/Documents/com.s 
MDS: e17f7601d9da9dea06b7c49c87c8f nap.file manager 3 SCContent ca 
958 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/6357297960555303 
251 : 0x0 (Size: 43357 bytes) 
Meta Data: 
Pixel resolution: 750x376 
Orientation: Horizontal (normal) 
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Bila 
5 


Pixel resolution: 


Orientation: 


1142x2114 


Horizontal (normal) 


Name: 5110148730146474392 Size (bytes): 145993 HEMI I © 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 23:05:37(UTC+1) 
4207fa93345_files_full.zip/private/v Fern, np, 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 23:05:37 (UTC+1) 
oni T9197 18 DEER EED- 9F E Accessed: 2021-02-14 23:05:37 (UTC+1) 
ocuments/com.s 
nap file. manager. 3 SCContent ca | Source file 42071283348 fles full zipiprivately | 7° 
ar/mobile/Containers/Data/Applicati 
96f409f9b03d/5110148730146474 0n/77919778-DC8B-AFED-9F7E- 
SEE 0DB1B276E89C/Documents/com.s 
MD5: 66250c1f201f85f37a41587ea843e nap.file manager 3 SCContent ca 
9a5 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/5110148730146474 
392 : 0x0 (Size: 145993 bytes) 
Meta Data: 
Pixel resolution: 1142x2114 
Orientation: Horizontal (normal) 
6 Name: 42233659368951 14432 Size (bytes): 273054 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 23:05:37(UTC+1) 
4207fa93345_files_full.zip/private/v ads np, 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 23:05:37(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-14 23:05:37(UTC+1) 
Goen EE Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2d-08df-4a1c-b8fe- 4207fa93345 files full.zip/private/v 
96f409f9b03d/4223365936895114 nt 
a 0DB1B276E89C/Documents/com.s 
MD5: 260cf0272d51bde049b0aed0b5c1 nap.file_manager_3_SCContent_ca 
78cb 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/42233659368951 14 
432 : 0x0 (Size: 273054 bytes) 
Meta Data: 
Pixel resolution: 1148x2122 
Orientation: Horizontal (normal) 
7 Name: 3010178063877366598 Size (bytes): 223567 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 23:05:37(UTC+1) 
4207fa93345_files_full.zip/private/v EVE OE: 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 23:05:37(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-14 23:05:37(UTC+1) 
paa an Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2 d-08df-4a1c-b8fe- = 4207fa93345 files full.zip/private/v 
96409f9b03d/3010178063877366 EE 
EE 0DB1B276E89C/Documents/com.s 
MD5: d30d633bae28a246766379345f9e nap.file_manager_3_SCContent_ca 
1087 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3010178063877366 
598 : 0x0 (Size: 223567 bytes) 
Meta Data: 
Pixel resolution: 1142x2114 
Orientation: Horizontal (normal) 
8 Name: 11795544510707875338 Size (bytes): 162784 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 23:05:37(UTC+1) 
4207fa93345_files_full.zip/private/v "EM AE 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 23:05:37 (UTC*1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-14 23:05:37(UTC+1) 
map file manager 3 SCCOntent ca | Source file 373fd2e35eced361b8ff2ca4a54ab 
10dí2d-08df-4a1c-b8fe- = 4207fa93345 files full.zip/private/v 
96f409f9b03d/1179554451070787 SÉ poet 
> 0DB1B276E89C/Documents/com.s 
MD5: 372cf885fd71ea7ec4dee2ba909c8f nap.file manager. 3 SCContent ca 
ed 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1179554451070787 
5338 : 0x0 (Size: 162784 bytes) 
Meta Data: 


ga 2.1 Bilder - rapport, 2023-11-01 14:47 diarienr: 5000-K189802-21 


254 


Bila 
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Pixel resolution: 


Resolution: 


Orientation: 


1125x2001 
72x72 (Unit: Inch) 


Horizontal (normal) 


Name: 16579692221021488153 Size (bytes): 267402 HEMI I E 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 23:05:37(UTC+1) 
4207fa93345_files_full.zip/private/v FE np, 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 23:05:37 (UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-14 23:05:37(UTC+1) 
o AP ANNA oe di 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager 3 SCContent ca 42071293345 files full.zip/private/ 
ra ar mob lle/Coltaineta/Oa ea Apple 
Se 657969222102148 0n/77919778-DC8B-AFED-9F7E- 
0DB1B276E89C/Documents/com.s 
MD5: 3b36205292f856f624c023ea14200 nap.file manager 3 SCContent ca 
601 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1657969222102148 
8153 : 0x0 (Size: 267402 bytes) 
Meta Data: 
Pixel resolution: 1148x2122 
Orientation: Horizontal (normal) 
10 | Name: IMG_0017.PNG Size (bytes): 9514741 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-15 13:00:03(UTC+1) 
4207fa93345_files_full.zip/private/v T An: 
ar/mobile/Media/DCIM/100APPLE/1 | Modified: 2021-02-15 13:00:03(UTC+1) 
MG 0017.PNG Accessed: 2021-02-15 13:00:03(UTC+1) 
MDS: 16b002ab42ae2246bd7ec7247417 | Source file 373fd2e35eced361b8ff2ca4a54ab 
a3ad 4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0017.PNG : 0x0 (Size: 
9514741 bytes) 
11 Name: 13207951742177297301 Size (bytes): 138899 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-15 20:40:31(UTC+1) 
4207fa93345_files_full.zip/private/v EE Sm: 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-15 20:40:31(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-15 20:40:59(UTC+1) 
DDBIBZrSESSCIDocuments/com S. | source Mo 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager 3 SCContent ca 42071293345 files fullzip/private/ 
Med EG Ter 
SEET 320795174217729 On/77919778-DC8B-4FED-9F7E. 
ODB1B276E89C/Documents/com.s 
MD5: 4e40a4fe7efa5eae8f9190f2484b7a nap.file manager 3 SCContent ca 
07 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1320795174217729 
7301 : 0x0 (Size: 138899 bytes) 
12 | Name: IMG, 0019.JPG Size (bytes): 128837 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 00:35:20(UTC+1) 
4207fa93345 files full.zip/private/v e " DE 
ar/mobile/Media/DCIM/100APPLE/1 | Modified: 2021-02-16 00:35:20(UTG+1) 
MG 0019.JPG Accessed: 2021-02-16 00:35:20(UTC+1) 
MDS: 1954bbe29dcaba57dc689c7f5b96f | Source file 373fd2e35eced361b8ff2ca4a54ab 
2b6 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0019.JPG : 0x0 (Size: 128837 
bytes) 
Meta Data: 
Pixel resolution: 1122x684 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
13 | Name: IMG. 0020.JPG Size (bytes): 311749 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 00:52:55(UTC+1) 
4207fa93345_files_full.zip/private/v ere LE, 
ar/mobile/Media/DCIM/100APPLE/1 | Modified: 20010216 00:52 5S UTE 1) 
MG_0020.JPG Accessed: 2021-02-16 00:52:55(UTC+1) 
MD5: fb24764beb95a0c91a9abee12aa8 | Source file 373fd2e35eced361b8ff2ca4a54ab 
5101 4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0020.JPG : 0x0 (Size: 311749 
bytes) 
Meta Data: 


ga 2.1 Bilder - rapport, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Bil 
ad ila 


Name: IMG_0021.JPG Size (bytes): 526683 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 00:52:58(UTC+1) 
4207fa93345_files_full.zip/private/v NET «ED. 
ar/mobile/Media/DCIM/100APPLE/I | Modified: 2021-02-16 00:52:58(UTC+1) 
MG 0021.JPG Accessed: 2021-02-16 00:52:58(UTC+1) 
MD5: 9695c0dbb9a817d00eb3eb92810f | Source file 373fd2e35eced361b8ff2ca4a54ab 
db5e 4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLEI/I 
MG_0021.JPG : 0x0 (Size: 526683 
bytes) 
Meta Data: 
Pixel resolution: 1500x2130 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
15 | Name: 12629390530199233979 Size (bytes): 68644 j 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 11:25:27(UTC+1) i 
4207fa93345_files_full.zip/private/v EE ER x , 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-16 11:25:27(UTC+1) itii d 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-16 11:25:28(UTC+1) Lees 
ad en Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2d-08df-4a1c-b8fe- B 42071293345 files full.zip/private/v 
96f409f9b03d/1262939053019923 Use pie cele 
SENE, 0DB1B276E89C/Documents/com.s 
MD5: 0d797570530b334aafe3e9533f220 nap.file_manager_3_SCContent_ca 
056 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1262939053019923 
3979 : 0x0 (Size: 68644 bytes) 
16 Name: 17908780385119457552 Size (bytes): 530800 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 11:55:46(UTC+1) 
4207fa93345_files_full.zip/private/v PRU EE. 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-16 11:55:46(UTC+1) 
on/77919778-DC8B-4FED-9F7E- | Accessed: 2021-02-16 12:20:39(UTC+1) 
nap fle manager e | Source ile 373fd2e35eced361b8ff2ca4a54ab 
10df2 d-08df-4a10-båfe- m 42071293345 files full.zip/private/v 
96140919b03d/1790878038511945 SE 
1992 0DB1B276E89C/Documents/com.s 
MD5: 03173198317db964ad168632b515 nap.file manager 3 SCContent ca 
f66f 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1790878038511945 
7552 : 0x0 (Size: 530800 bytes) 
17 | Name: 8907130734642812886 Size (bytes): 853110 e 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 11:56:09(UTC+1) 
4207fa93345_files_full.zip/private/v Pre 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-16 11:56:09(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-16 12:20:39(UTC+1) 
GC eege E | Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2d-08df-4a1c-b8fe- E 42071293345 files full.zip/private/v | = 
96f409f9b03d/8907 130734642812 Ag a 
eee 0DB1B276E89C/Documents/com.s 
MD5: 61350a38515574aa2afd024f84549 nap.file_manager_3_SCContent_ca 
560 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8907 130734642812 
886 : 0x0 (Size: 853110 bytes) 
18 | Name: 16208314349508744697 Size (bytes): 593428 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 12:32:20(UTC+1) 
4207fa93345 files full.zip/private/v TES .29- 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-16 12:32:20(UTC+1) D 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-16 12:32:20(UTC+1) 
peta I manader S cdi ca Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2d-08df-4a1c-b8fe- = 4207fa93345 files full.zip/private/v 
96f409796034/1620831434950874 SE EE 
a ODB1B276E89C/Documents/com.s 
MDS: 5cef08baa97b44b29d61c220fc1c2 nap.file manager 3 SCContent ca 
0d6 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1620831434950874 
4697 : 0x0 (Size: 593428 bytes) 
19 | Name: 8429890263572607416 Size (bytes): 701464 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-16 16:27:39UTC+1) | 
4207fa93345 files full.zip/private/v far: 97. 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-16 16:27:39(UTC+1) E) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-16 16:27:39(UTC+1) 
en ee Source file 373fd2e35eced361b8ff2ca4a54ab næ 
10df2d-08df-4a1c-b8fe- = 4207fa93345 files full.zip/private/v ~ 
96f409f9b03d/8429890263572607 SE 
Ss ODB1B276E89C/Documents/com.s 
MD5: 831c798ca973f45201772e29e7 c03 nap.file manager 3 SCContent ca 
6ae 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8429890263572607 
416 : 0x0 (Size: 701464 bytes) 


ga 2.1 Bilder - rapport, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Bil 
Im ila 


21 


22 


23 


24 


25 


Name: 
Path: 


MD5: 


Name: 
Path: 


MD5: 


Name: 
Path: 


MD5: 


Name: 


Path: 


MD5: 


Name: 
Path: 


MD5: 


Name: 
Path: 


MD5: 


11633260174429347193 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
ODB1B276E89C/Documents/com.s 
nap.file manager 3 SCContent ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1163326017442934 
7193 


308eea78807507c32345c8afaadf5 
34f 


11319015233496082657 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1131901523349608 
2657 


cfb3542ceb64f05d916061e528aae 
42e 


3447301231455106300 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3447301231455106 
300 


5d811d3a7113f9758d3ff010dc8ca 
1fd 


ef72e7a4617d92778389d4b93f61a 
80e 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/FCFD6C9B-663A-4C5F-85E7- 
6A732F3529ED/Library/Caches/co 
m.onevcat.Kingfisher.ImageCache. 
default/ef72e7a4617d92778389d4 
b93f61a80e 


ed820887684efb4f8af7f82da37a26 
85 


IMG 0033.PNG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0033.PNG 


8d478694c38f74f2101804af874efe 
5f 


IMG 0034.PNG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0034.PNG 


98e7bb854aa1df5ebe5ce2b02d65f 
53d 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Meta Data: 
Pixel resolution: 


Orientation: 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


99321 
2021-02-16 17:01:56(UTC+1) 
2021-02-16 17:01:56(UTC+1) 
2021-02-16 17:01:56(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1163326017442934 
7193 : 0x0 (Size: 99321 bytes) 


343552 

2021-02-16 20:17:32(UTC+1) 
2021-02-16 20:17:32(UTC 1) 
2021-02-16 20:17:35(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1 131901523349608 
2657 : 0x0 (Size: 343552 bytes) 


241904 

2021-02-16 23:33:58(UTC+1) 
2021-02-16 23:33:58(UTC+1) 
2021-02-17 11:36:17(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3447 301231455106 
300 : 0x0 (Size: 241904 bytes) 


16179 
2021-02-17 12:29:43(UTC+1) 
1990-01-27 11:50:44(UTC+1) 
1990-01-27 11:50:44(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/FCFD6C9B-663A-4C5F-85E7- 
6A732F3529ED/Library/Caches/co 
m.onevcat.Kingfisher.ImageCache. 
default/ef72e7a4617d92778389d4 
b93f61a80e ` 0x0 (Size: 16179 
bytes) 


120x120 
Horizontal (normal) 


9733087 
2021-02-18 00:59:46(UTC+1) 
2021-02-18 00:59:46(UTC+1) 
2021-02-18 00:59:46(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0033.PNG : 0x0 (Size: 
9733087 bytes) 


727561 

2021-02-18 16:34:11(UTC+1) 
2021-02-18 16:34:11(UTC+1) 
2021-02-18 16:34:11(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0034.PNG : 0x0 (Size: 727561 
bytes) 


aga 2.1 Bilder - rapport, 2023-11-01 14:47 diarienr: 5000-K189802-21 


Bil 
26 


VAL 


28 


29 


30 


Name: 


Path: 


MDS: 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


7887027209670906882 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
ODB1B276E89C/Documents/com.s 
nap.file manager 3 SCContent ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/7887027209670906 
882 


1d433216fb1f9705e6de29829b860 
3f3 


2240435645623405002 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/2240435645623405 
002 


4272ba29ef6e6c0a6f5a28c8d4140 
5fe 


8662731473076195366 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8662731473076195 
366 


de16c81fc04aa2af4f3dbf08ee440a 
b6 


IMG 0040.JPG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLEI/I 
MG 0040.JPG 


2cfe46a1a93917e436a483acaefd2 
dc2 


IMG 0041.JPG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0041.JPG 


fd59c0b02107857ecf54b85656655 
f59 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Meta Data: 
Pixel resolution: 


Resolution: 
Orientation: 
Size (bytes): 
Created: 
Modified: 


Accessed: 
Source file 


Meta Data: 
Camera Make: 


Camera Model: 
Capture Time: 
Pixel resolution: 
Resolution: 


Orientation: 


593011 

2021-02-19 23:48:22(UTC+1) 
2021-02-19 23:48:22(UTC+1) 
2021-02-19 23:48:22(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
42071293345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/7887027209670906 
882 : 0x0 (Size: 593011 bytes) 


191633 

2021-02-20 02:52:33(UTC+1) 
2021-02-20 02:52:33(UTC+1) 
2021-02-20 02:52:34(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/2240435645623405 
002 : 0x0 (Size: 191633 bytes) 
767687 

2021-02-20 18:13:29(UTC+1) 
2021-02-20 18:13:29(UTC+1) 
2021-02-20 18:13:29(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
ODB1B276E89C/Documents/com.s 
nap.file manager 3 SCContent ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8662731473076195 
366 : 0x0 (Size: 767687 bytes) 
153885 

2021-02-20 22:58:39(UTC+1) 
2021-02-20 22:58:39(UTC+1) 
2021-02-20 22:58:39(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0040.JPG : 0x0 (Size: 153885 


bytes) 

750x1334 

72x72 (Unit: Inch) 
Horizontal (normal) 


1138729 
2021-02-21 03:16:02(UTC+1) 
2021-02-21 03:16:02(UTC+1) 
2021-02-21 03:16:02(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
42071293345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0041.JPG : 0x0 (Size: 
1138729 bytes) 


Apple 

iPhone X 
2021-02-21 03:16:02 
3840x2160 

72x72 (Unit: Inch) 


Rotate 90 CW 


— | Bilaga 2.1 Bilder - rapport, 2023-11-01 14:47 diarienr: 5000-K189802-21 
31 | Name: 13570990630074263692 Size (bytes): 


Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 
4207fa93345_files_full.zip/private/v Modified: 
ar/mobile/Containers/Data/Applicati ive e 
on/77919778-DC8B-4FED-9F7E- Accessed: 
ODB1B276E89C/Documents/com.s 


nap.file manager 3 SCContent ca | Source file 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1357099063007426 
3692 
MD5: 479ef481534fb1c54b7b32e5ef98e 
559 
Meta Data: 
Pixel resolution: 
Orientation: 
32 | Name: IMG 0052.PNG Size (bytes): 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 


4207fa93345 files full.zip/private/v ado 
ar/mobile/Media/DCIM/100APPLE/1 | Modified: 


197463 

2021-02-21 17:47:20(UTC+1) 
2021-02-21 17:47:20(UTC+1) 
2021-02-21 17:47:20(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1357099063007426 
3692 : 0x0 (Size: 197463 bytes) 


1134x2108 
Horizontal (normal) 


963327 
2021-02-23 03:16:27(UTC+1) 
2021-02-23 03:16:27(UTC+1) 


258 
UN 


ag E 
F E 
$ 3 


4207fa93345 files full.zip/private/v Modified: 
ar/mobile/Containers/Data/Applicati Dome 
on/77919778-DC8B-4FED-9F7E- Accessed: 
ODB1B276E89C/Documents/com.s s fi 
nap.file manager 3 SCContent ca | YQurce file 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1820440973330557 
9013 


MD5: e2474d3d2e21255ec787e3ea81ba 
aa0c 


34 | Name: 511E647B-C8B0-4D1E-AF70- Size (bytes): 
83CB2FETAFE Redi 


Path: 373fd2e35eced361b8ff2ca4a54ab Modified: 
42071293345 files full.zip/private/v | Nolet: 
ar/mobile/Containers/Data/PluginKi | Accessed: 
tPlugin/D709FF81-CAA0-4E6F- 
AB75- Source file 
7465BF246B7A/Library/Caches/co 
m.burbn.instagram.notificationexte 
nsion/fsCachedData/511E647B- 
C8B0-4D1E-AF70- 


2021-02-23 03:35:02(UTC+1) 
2021-02-23 03:35:02(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1820440973330557 
9013 : 0x0 (Size: 185380 bytes) 


262833 
2021-02-23 11:54:57(UTC+1) 
2021-02-23 11:54:57(UTC+1) 
2021-02-23 11:54:57(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/PluginKi 
tPlugin/D709FF81-CAA0-4E6F- 
AB75- 
7465BF246B7A/Library/Caches/co 


MG_0052.PNG Accessed: 2021-02-23 03:16:27(UTC+1) 
MDS: de45d5df04bfc7c4bb3e050c9ee7c | Source file 373fd2e35eced361b8ff2ca4a54ab 
807 4207fa93345_files_full.zip/private/v | === 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0052.PNG : 0x0 (Size: 963327 
bytes) 
33 | Name: 18204409733305579013 Size (bytes): 185380 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 03:35:02(UTC+1) 


4207fa93345 files full.zip/private/v Modified: 
ar/mobile/Containers/Data/Applicati S 
on/77919778-DC8B-4FED-9F7E- Accessed: 
0DB1B276E89C/Documents/com.s 


C83CB2FE1AFE : Aber 
m.burbn.instagram.notificationexte 
MDS: 30c8cbcc68852f7fcf720d09853939 nsion/fsCachedData/511E647B- 
5d C8B0-4D1E-AF70- 
C83CB2FE1AFE : 0x0 (Size: 
262833 bytes) 
35 | Name: 8068488195769457211 Size (bytes): 233692 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 13:14:56(UTC+1) 


2021-02-23 13:14:56(UTC+1) 
2021-02-23 13:14:59(UTC+1) 


ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- Accessed: 
0DB1B276E89C/Documents/com.s s fil 
nap.file manager 3 SCContent ca | Source file 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3270432188731252 
207 


MD5: 668958281def329bba6e0b6da649f 
aa2 


i Source file 373fd2e35eced361b8ff2ca4a54ab 
ee ee 4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
Sor OD HORE T 95769457 0n/77919778-DC8B-4FED-9F7E. 
0DB1B276E89C/Documents/com.s 
MD5: a65d684de99853914b15d95a79e3 nap.file manager 3 SCContent ca 
606b 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8068488195769457 
211 : 0x0 (Size: 233692 bytes) 
36 | Name: 3270432188731252207 Size (bytes): 125727 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 13:20:23(UTC+1) 
4207fa93345 files full.zip/private/v Modified: 2021-02-23 13:20:23(UTC+1) 


2021-02-23 13:20:27(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3270432188731252 
207 : 0x0 (Size: 125727 bytes) 


NUNG 
in 
aM a $ 
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37 | Name: 13214038314788928889 Size (bytes): 97412 HEMLIG 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 19:08:51(UTC+1) | 
4207fa93345 files full.zip/private/v [erg .na- d al 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-23 19:08:51 (UTC+1) A 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-23 19:08:52(UTC+1) n 
URBI UE ES Pore NONE ENE NG oe tle 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager. 3 SCContent ca å Å 4 
10df2d-08df-4a1c-b8fe- 4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
96f409f9b03d/1 321403831478892 arena a Ze 
0DB1B276E89C/Documents/com.s 
MD5: ed9e5950235c40b 1cd6fd1 1ffbe30 nap.file manager 3 SCContent ca 
574 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1321403831478892 
8889 : 0x0 (Size: 97412 bytes) 
38 | Name: IMG, 0060.JPG Size (bytes): 193778 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 20:53:51(UTC+1) 
4207fa93345_files_full.zip/private/v far: Ea: 
ar/mobile/Media/DCIM/100APPLE/1 | Modified: 2021-02:23-20:53:51(UTE+1) 
MG 0060.JPG Accessed: 2021-02-23 20:53:51(UTC+1) 
MD5: 074b585fb271fa2105f2c46949896 | Source file 373fd2e35eced361b8ff2ca4a54ab 
7cc 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0060.JPG : 0x0 (Size: 193778 
bytes) 
Meta Data: 
Pixel resolution: 1242x2688 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
39 | Name: IMG 0061.JPG Size (bytes): 194045 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 20:53:51(UTC+1) 
42071293345 files full.zip/private/v PN Ea. 
ar/mobile/Media/DCIM/100APPLE/I | Modified: NE 
MG 0061.JPG Accessed: 2021-02-23 20:53:51(UTC+1) 
MD5: d40b3ec9324ce90f99ef253181645 | Source file 373fd2e35eced361b8ff2ca4a54ab 
5f6 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLEI/I 
MG_0061.JPG : 0x0 (Size: 194045 
bytes) 
Meta Data: 
Pixel resolution: 1242x2688 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
^0 | Name: IMG, 0059.JPG Size (bytes): 193590 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 20:53:51(UTC+1) 
4207fa93345_files_full.zip/private/v Far: Ea. 
ar/mobile/Media/DCIM/100APPLE/I | Modified: 2021-0229 20321 TEN) 
MG_0059.JPG Acoessed: 2021-02-23 20:53:51(UTC+1) 
MDS: 1989ec2fa17931e53eac9692a1f89 | Source file 373fd2e35eced361b8ff2ca4a54ab 
146 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0059.JPG : 0x0 (Size: 193590 
bytes) 
Meta Data: 
Pixel resolution: 1242x2688 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
^1 | Name: IMG 0058.JPG Size (bytes): 193193 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-23 20:53:51(UTC+1) 
4207fa93345_files_full.zip/private/v Nang "ES 
ar/mobile/Media/DCIM/100APPLE/| | Modified: 20215022320 AA NEN GN) 
MG 0058.JPG Accessed: 2021-02-23 20:53:51(UTC+1) 
MD5: 06f2dddd3d3334825ea430de6625 | Source file 373fd2e35eced361b8ff2ca4a54ab 
e8f7 4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0058.JPG : 0x0 (Size: 193193 
bytes) 
Meta Data: 
Pixel resolution: 1242x2688 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
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42 Name: 15898981641500938172 Size (bytes): 824399 N HEMLI G 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 01:17:14(UTC+1) b 
4207fa93345 files full.zip/private/v ds P Fo Pan, 
ar/mobile/Containers/Data/Applicati | Modified: de db. re 
on/77919778-DC8B-4FED-9F 7E- Accessed: 2021-02-24 01:17:22(UTC+1) kang 
rep file manager 3 SCContent ca | Source file 373fd2e35eced361b8ff2ca4a54ab | m ` 
10df2 d-08df-4a10-båfe- = 4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
Fn 589898164150093 0n/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
MD5: 068dda2b88243336a5b6b5633899 nap.file_manager_3_SCContent_ca 
b259 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1589898164150093 
8172 : 0x0 (Size: 824399 bytes) 
43 | Name: 3962768266994007994 Size (bytes): 735161 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 01:17:14(UTC+1) 
4207fa93345_files_full.zip/private/v far» 47. 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 01:17:14(UTC+1) 
on/77919778-DC8B-4FED-9F 7E- Accessed: 2021-02-24 01:17:14(UTC+1) 
ODE BE Be Pave nel colts || Source e 373fd2e35eced361b8ff2ca4a54ab 
nap.file_manager_3_SCContent_ca å bcn: 
m = i 4207fa93345 files full.zip/private/v 
AERE O ar/mobile/Containers/Data/Applicati 
Dru e bee LE 0n/77919778-DC8B-A4FED-9F7E- 
ODB1B276E89C/Documents/com.s 
MD5: 485d08e8bd8be3c3747353ee4b83 nap.file manager 3 SCContent ca 
238d 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3962768266994007 
994 : 0x0 (Size: 735161 bytes) 
44 | Name: IMG_0074.JPG Size (bytes): 306481 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 01:49:41(UTC+1) 
4207fa93345_files_full.zip/private/v TM NES 
ar/mobile/Media/DCIM/100APPLE/I | Modified: 2021-02-24 01:49:41(UTC+1) 
MG_0074.JPG Accessed: 2021-02-24 01:49:41(UTC+1) 
MD5: e6b867ec4e08d4d46e4bc48e9826 | Source file 373fd2e35eced361b8ff2ca4a54ab 
Beaf 4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLEI/I 
MG_0074.JPG : 0x0 (Size: 306481 
bytes) 
Meta Data: 
Pixel resolution: 1242x2688 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
45 | Name: IMG_0075.JPG Size (bytes): 385614 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 01:49:41(UTC+1) 
4207fa93345_files_full.zip/private/v Br ur 
ar/mobile/Media/DCIM/100APPLE/I | Modified: 20210224 00 IEA 
MG_0075.JPG Accessed: 2021-02-24 01:49:41(UTC+1) 
MD5: d81ccc59d6d96125ffc79e1de43a7 | Source file 373fd2e35eced361b8ff2ca4a54ab 
3b4 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0075.JPG : 0x0 (Size: 385614 
bytes) 
Meta Data: 
Pixel resolution: 1242x2688 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
46 | Name: IMG. 0072.JPG Size (bytes): 297333 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 01:49:41(UTC+1) 
4207fa93345 files full.zip/private/v P Aa: 
ar/mobile/Media/DCIM/100APPLE/| | Modified: ke sl 
MG 0072.JPG Accessed: 2021-02-24 01:49:41(UTC+1) 
MD5: 0f416cd4e8d6205fc906d5d8f3032 | Source file 373fd2e35eced361b8ff2ca4a54ab 
25a 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0072.JPG : 0x0 (Size: 297333 
bytes) 
Meta Data: 
Pixel resolution: 1242x2688 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
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Bil 
rg ila 


48 


49 


50 


51 


52 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


IMG 0073.JPG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0073.JPG 


614a3de48950dc016bb57f3695ff8 
380 


IMG 0071.JPG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0071.JPG 


77822138baf26d53f80753b5a5b63 
e69 


IMG 0078.JPG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0078.JPG 


48e02462d0b55d70fa0c464ec568 
Taa8 


2e8820cb4942f18a7fbd42686a97f 
9d2 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/7DCF1696-B768-4516-96A4- 
16CD467E46E1/Library/Caches/co 
m.burbn.instagram.IGImageCache/ 
ao 8a7fbd42686a97f 


1ea84af270e79a304632a2e51970 
0399 


acd23b59f0c12a7a0405083951d5 
5163 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/7DCF1696-B768-4516-96A4- 
16CD467E46E1/Library/Caches/co 
m.burbn.instagram.IGImageCache/ 
acd23b59f0c12a7a0405083951d5 
5163 


c22a6a4c7f76c131a2a2221c2899a 
ce7 


b1f96dfd2e61b0542d606233a48ae 
57c 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/7DCF1696-B768-4516-96A4- 
16CD467E46E1/Library/Caches/co 
m.burbn.instagram.IGImageCache/ 
b1f96dfd2e61b0542d606233a48ae 
57c 


dd3a156c5f4be33bc4b16a8b2a83c 
c25 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Meta Data: 


Pixel resolution: 


Resolution: 


Orientation: 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Meta Data: 


Pixel resolution: 


Resolution: 


Orientation: 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Meta Data: 


Pixel resolution: 


Resolution: 


Orientation: 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


366931 

2021-02-24 01:49:41(UTC+1) 
2021-02-24 01:49:41(UTC+1) 
2021-02-24 01:49:41(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0073.JPG : 0x0 (Size: 366931 
bytes) 


1242x2688 
72x72 (Unit: Inch) 
Horizontal (normal) 


345344 
2021-02-24 01:49:41(UTC+1) 
2021-02-24 01:49:41(UTC+1) 
2021-02-24 01:49:41(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0071.JPG : 0x0 (Size: 345344 
bytes) 


1242x2688 
72x72 (Unit: Inch) 
Horizontal (normal) 


213203 

2021-02-24 01:49:42(UTC+1) 
2021-02-24 01:49:42(UTC+1) 
2021-02-24 01:49:42(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 

4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG 0078.JPG : 0x0 (Size: 213203 
bytes) 


1242x2688 
72x72 (Unit: Inch) 
Horizontal (normal) 


21632 

2021-02-24 02:39:57(UTC+1) 
2021-02-25 05:59:24(UTC+1) 
2021-02-25 05:59:24(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/7DCF 1696-B768-4516-96A4- 
16CD467E46E1/Library/Caches/co 
m.burbn.instagram.IGImageCache/ 
2e8820cb4942f18a7fbd42686a97f 
9d2 : 0x0 (Size: 21632 bytes) 


30547 

2021-02-24 02:39:57(UTC+1) 
2021-02-25 05:59:24(UTC+1) 
2021-02-25 05:59:24(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/7DCF1696-B768-4516-96A4- 
16CD467E46E1/Library/Caches/co 
m.burbn.instagram.IGImageCache/ 
acd23b59f0c12a7a0405083951d5 
5163 : 0x0 (Size: 30547 bytes) 


49481 

2021-02-24 02:39:57(UTC+1) 
2021-02-25 05:59:24(UTC+1) 
2021-02-25 05:59:24(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/7DCF1696-B768-4516-96A4- 
16CD467E46E 1/Library/Caches/co 
m.burbn.instagram.IGImageCache/ 
b1f96dfd2e61b0542d606233a48ae 
57c : 0x0 (Size: 49481 bytes) 
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56 
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58 


Name: 
Path: 


MD5: 


Name: 
Path: 


MD5: 


Name: 
Path: 


MD5: 


Name: 


Path: 


MDS: 


Name: 
Path: 


MDS: 


Name: 
Path: 


MD5: 


4219173130104079633 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/4219173130104079 
633 


0e4f3e37ebb35c5b8be4fff440ee7b 
52 


8169749086886742911 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8169749086886742 
911 


14536a82b9a5f7 ae408 14df68ae49 
dda 


4111602745795513221 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/4111602745795513 
221 


33dde9334e44358bd40c414de578 
3770 


IMG 0090.PNG 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE!I 
MG 0090.PNG 


484ca37dbf7c23ca4a69512900e09 
ebb 


3463577787441088740 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
ODB1B276E89C/Documents/com.s 
nap.file manager 3 SCContent ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3463577787441088 
740 


11205751df4849954193325b5b6c7 
d0e 


10465663208146181786 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1046566320814618 
1786 


3bfc2b6741e6d3dfc333f0cdfd5a66 
87 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Meta Data: 
Pixel resolution: 


Orientation: 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Attachments: 


Attachment source: 


Source file 


Size (bytes): 
Created: 
Modified: 
Accessed: 
Source file 


921802 
2021-02-24 13:57:34(UTC+1) 
2021-02-24 13:57:34(UTC+1) 
2021-02-24 13:57:34(UTC 1) 


373fd2e35eced361b8ff2ca4a54ab 
42071293345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/4219173130104079 
633 : 0x0 (Size: 921802 bytes) 


768622 

2021-02-24 13:57:34(UTC+1) 
2021-02-24 13:57:34(UTC+1) 
2021-02-24 13:57:34(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8169749086886742 
911 : 0x0 (Size: 768622 bytes) 


203227 

2021-02-24 15:22:59(UTC+1) 
2021-02-24 15:22:59(UTC+1) 
2021-02-24 15:24:51(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/4 111602745795513 
221 : 0x0 (Size: 203227 bytes) 


828x1792 
Horizontal (normal) 


3017731 

2021-02-24 18:40:24(UTC+1) 
2021-02-24 18:40:24(UTC+1) 
2021-02-24 18:40:24(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLEI/I 
MG_0090.PNG : 0x0 (Size: 
3017731 bytes) 


113367 

2021-02-24 19:16:20(UTC+1) 
2021-02-24 19:16:20(UTC+1) 
2021-02-24 23:40:17(UTC+1) 
1 

Snapchat (1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
ODB1B276E89C/Documents/com.s 
nap.file manager 3 SCContent ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3463577787441088 
740 : 0x0 (Size: 113367 bytes) 


440609 

2021-02-24 19:16:46(UTC+1) 
2021-02-24 19:16:46(UTC+1) 
2021-02-24 19:16:47(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1046566320814618 
1786 : 0x0 (Size: 440609 bytes) 
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59 Name: 8074097464000707434 Size (bytes): 514706 HEMI I G 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 19:27:44(UTC+1) 
4207fa93345 files full.zip/private/v IEEE ER? 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 19:27:44UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-24 19:27:44(UTC+1) 
PBB AE EERE Documentecon:S olivo ale 373fd2e35eced361b8ff2ca4a54ab 
nap.file_manager_3_SCContent_ca 19 7 naia 
a AA one 
ar 
Vera E 0n/77919778-DC8B-AFED-9F7E- 
0DB1B276E89C/Documents/com.s 
MD5: aede399492f2a6774f978e527dAcf nap.file manager 3 SCContent ca 
485 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8074097464000707 
434 : 0x0 (Size: 514706 bytes) 
60 | Name: 9737664344280437203 Size (bytes): 619305 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 20:24:51(UTC+1) 
42071293345 files full.zip/private/v far: ER 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 20:24:51(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-24 20:24:57(UTC+1) 
OBE Tee EDER cons | Soues la 373fd2e35eced361b8ff2ca4a54ab 
nap.file_manager_3_SCContent_ca i ipn 
10df2d-08df-4a1c-b8fe- eo EN 
ar/mobile/Containers/Data/Applicati 
AG 09f9b03d/9737664344280437 0n/77919778-DC8B-AFED-9F7E- 
ODB1B276E89C/Documents/com.s 
MD5: f63b72aee3b3177ea1895e25a707 nap.file manager 3 SCContent ca 
a8a4 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/9737664344280437 
203 : 0x0 (Size: 619305 bytes) 
61 Name: 2013427898313326939 Size (bytes): 540289 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 20:24:51(UTC+1) 
4207fa93345_files_full.zip/private/v Pr JA: 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 20:24:51(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-24 20:24:51(UTC+1) 
Seege 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager 3 SCContent ca : Å 1 
10df2d-08df-4a'c-b8fe- SEN kaa n i ss 
ar/mobile/Containers/Data/Applicati 
nad 3427898313326 0n/77919778-DC8B-4FED-9F7E. 
0DB1B276E89C/Documents/com.s 
MD5: e6f4f1608a261ea97b38f576a4092 nap.file manager 3 SCContent ca 
439 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/2013427898313326 
939 : 0x0 (Size: 540289 bytes) 
62 | Name: 8194780852731202879 Size (bytes): 837263 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 20:24:51(UTC+1) 
4207fa93345_files_full.zip/private/v STEE P 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 20:24:51(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-24 20:24:51(UTC+1) 
ODB 1B276F89C/Documents/com.S | Source file 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager 3 SCContent ca : hold 
10df2d-08df-4a1c-b8fe- 4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
26f409f9b03d/81 94780852731202 NENNE 
0DB1B276E89C/Documents/com.s 
MD5: 1b0009c504fd23a144b9c1e0f7820 nap.file manager 3 SCContent ca 
488 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/8194780852731202 
879 : 0x0 (Size: 837263 bytes) 
63 | MDS: 9f551f31faaea7d45340adf8492b4c | Size (bytes): 6976 
7b 
Duplicates(1) 
63(1) Name: 8606735fbf4145c125d5c680ebbcb | Created: 2021-02-24 23:11:17(UTC+1) 
Path ped Modified: 2021-02-25 00:02:53(UTC+1) 
ath: 373fd2e35eced361b8ff2ca4a54ab , pra 
42071293345 files full.zip/private/v | Accessed: 2021-02-25 00:02:53 00 TC) 
ar/mobile/Containers/Data/Applicati | Source file 373fd2e35eced361b8ff2ca4a54ab 
on/7DCF 1696-B768-4516-96A4- 4207fa93345 files full.zip/private/v 
16CD467E46E1/Library/Caches/co ar/mobile/Containers/Data/Applicati 
m.burbn.instagram.IGlmageCache/ on/7DCF 1696-B768-4516-96A4- 
8606735fbf4145c125d5c680ebbcb 16CD467E46E1/Library/Caches/co 
ae9 m.burbn.instagram.IGImageCache/ 
8606735fbf4 145c125d5c680ebbcb 
ae9 : 0x0 (Size: 6976 bytes) 
63(2) Name: 1042014436ddfea20ade027f1afeef | Created: 2021-02-24 23:23:55(UTC+1) 
Bh 2r Modified: 2021-02-25 05:59:24(UTC+1) 
ath: 373fd2e35eced361b8ff2ca4a54ab S E 
42071293345 files_full.zip/private/v | Accessed: 2021-02-25 05:59:24(UTC+1) 
ar/mobile/Containers/Data/Applicati | Source file 373fd2e35eced361b8ff2ca4a54ab 
on/7DCF1 696-B768-4516-96A4- 42071293345 files full.zip/private/v 
16CD467E46E1/Library/Caches/co ar/mobile/Containers/Data/Applicati 
m.burbn.instagram.IGImageCache/ on/7DCF1696-B768-4516-96A4- 
1c42c14436ddfea20ade027f1afeef 16CD467E46E 1/Library/Caches/co 
27 m.burbn.instagram.IGImageCache/ 
1c42c14436ddfea20ade027f1afeef 
27 : 0x0 (Size: 6976 bytes) 
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264 


Bil 
ad ila 


Pixel resolution: 


1125x2000 


Name: IMG_0093.JPG Size (bytes): 231460 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 23:31:13(UTC+1) HEM) IG 
4207fa93345 files full.zip/private/v TNT 34. 
ar/mobile/Media/DCIM/100APPLE/I | Modified: 2021-02-24 23:31:13(UTC+1) 
MG. 0093.JPG Accessed: 2021-02-24 23:31:13(UTC+1) 
MD»: b9c18720aa2c01824838be89f04b | Source file 373fd2e35eced361b8ff2ca4a54ab 
936c 4207fa93345_files_full.zip/private/v 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0093.JPG : 0x0 (Size: 231460 
bytes) 
Meta Data: 
Pixel resolution: 828x1792 
Resolution: 72x72 (Unit: Inch) 
Orientation: Horizontal (normal) 
65 | Name: IMG. 0094.PNG Size (bytes): 1214431 2: 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 00:02:50(UTC+1) Emo 
4207fa93345_files_full.zip/private/v Here Me —— 
ar/mobile/Media/DCIM/100APPLE/1 | Modified: 2021-02-25 00:02:50(UTC+1) ES 
MG_0094.PNG Accessed: 2021-02-25 00:02:50(UTC+1) eet 
MDS: 96d5d314601321ccfdb41ae05846 | Source file 373fd2e35eced361b8ff2ca4a54ab | == === 
435f 4207fa93345_files_full.zip/private/v | * — * 
ar/mobile/Media/DCIM/100APPLE/I 
MG. 0094.PNG : 0x0 (Size: 
1214431 bytes) 
66 Name: 9709691928586834034 Size (bytes): 99776 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 00:30:34(UTC+1) 
4207fa93345 files full.zip/private/v "— pra 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-25 00:30:34(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-25 00:31:57(UTC+1) 
NN eege 373fd2e35eced36 1b8ff2ca4a54ab 
NE aaa 4207fa93345 files full.zip/private/v 
10df2d-08df-4a1c-b8fe- mobile/Containers/D t JA, Wat 
96f409f9b03d/970969 1928586834 ON TOIT TR DOSE. åre Borre. l 
034 0DB1B276E89C/Documents/com.s 
MD5: b8c89f7d3c44d14fb86ec5224eb69 nap.file manager 3 SCContent ca 
896 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/9709691928586834 
034 : 0x0 (Size: 99776 bytes) 
Meta Data: 
Pixel resolution: 750x1334 
Orientation: Horizontal (normal) 
67 | Name: 143517050791129943 Size (bytes): 861889 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 03:16:10(UTC+1) 
4207fa93345_files_full.zip/private/v TUM ex 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-25 03:16:10(UTC+1) 
on/77919778-DC8B-4FED-9F7E- | Accessed: 2021-02-25 03:16:10(UTC+1) 
CE IBA NEA DOMENE com Source Me 373fd2e35eced361b8ff2ca4a54ab 
O Ba A LIEN e 42071293345. files full.zip/private/v 
er era 1299 armobie C onanera Applicat 
43 on/77919778-DC8B-4FED-9F7E- 
ODB1B276E89C/Documents/com.s 
MD5: fb81887b6e0d323b078fe91d2c619 nap.file manager 3 SCContent ca 
c9f 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1435170507911299 
43 : 0x0 (Size: 861889 bytes) 
68 Name: Offfc4d806b50f54bfad867c801d3e | Size (bytes): 100796 
28 Created: 2021-02-25 04:28:25(UTC+1) 
Path: 373fd2e35eced361b8ff2ca4a54ab ind: ine: 
42071293345. files_full.zip/private/v | Modified: 2021-02-25 10:03:31(UTC 1) 
ar/mobile/Containers/Data/Applicati | Accessed: 2021-02-25 10:03:31(UTC+1) Y 
DEET 373fd2e35eced361b8ff2ca4a54ab 
16CD467E46E1/Library/Caches/co 42071293345 files full.zip/private/ 
a ar/mobile/Containers/Data/Applicati 
eg AA d3e on/7DCF1696-B768-4516-06A4- 
16CD467E46E 1/Library/Caches/co 
MD5: 221222429501414765481fd70d04 m.burbn.instagram.IGlmageCache/ 
896d Offfc4d806b50f54bfad867c801d3e 
58 : 0x0 (Size: 100796 bytes) 
Meta Data: 
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Name: AF936A1E-DEOB-4BD2-871F- Size (bytes): 551615 
ELE SIDE Created: 2021-02-25 04:56: 18(UTC+1) 
Path: 373fd2e35eced361b8ff2ca4a54ab veru N 
42071293345. files full.zip/private/v | Modified: 2021-02-25 04:56:18(UTC+1) 
Eure NAPAG tag tea Accessed: 2021-02-25 04:56:18(UTC+1) 
on - 

; Source file 373fd2e35eced361b8ff2ca4a54ab 

E ZOAEAQ/Libråry/SplashBoa 4207fa93345 files full.zip/private/v 
pshots/scenelD/com.apple. S - bal 
Maps-/1/33968-E744-4A31- TE 
ME (EE 397FB120AEA0/Library/SplashBoa 
rd/Snapshots/scenelD/com.apple. 
EO Maps-71733388-E744-4A31- 
MD5: 7c415c64165794606b383e9b2b75 A1EC-C3B1B344A427/AF936A1E- 
9888 DEOB-4BD2-871F- 
F9A390CAE542@3x.ktx : OxO 
(Size: 551615 bytes) 
70 | Name: 734a303e2bd7d3cec22df349f2d56 | Size (bytes): 121341 
SU Created: 2021-02-25 05:58:54(UTC+1) 
Path: 373fd2e35eced361b8ff2ca4a54ab PAH JEG: 
42071293345 files full.zip/privaterv | Modified: 2021-02-25 05:58:54(UTC+1) 
EN Accessed: 2021-02-25 05:58:54(UTC+1) 
on - - - - 

i Source file 373fd2e35eced361b8ff2ca4a54ab 
16CD467E46E1/Library/Caches/co : høre 
m.burbn.instagram.IGImageCache/ Jorinaa Sf es TuS pivare M 
734a303e2bd7d3cec22df349f2d56 On TBCE1 696 TGD: 4516. Dep l 
970 c a p 

16CD467E46E1/Library/Caches/co 
MD»: af25007ad28befc88e6b7787d840d m.burbn.instagram.IGlmageCache/ 
c70 734a303e2bd7d3cec22df349f2d56 
970 : 0x0 (Size: 121341 bytes) 
71 Name: 49edac31765bded52bb4e71eea7f | Size (bytes): 54700 
a 2883 Created: 2021-02-25 05:59:17(UTC+1) 
ath: 373fd2e35eced361b8ff2ca4a54ab FA AN 
4207f293345 files full.zip/private/v | Modified: 2021-02-25 05:59:17(UTC+1) 
arp le om ane Cee polet Accessed: 2021-02-25 05:59:17(UTC+1) 
on - - - - 

i Source file 373fd2e35eced361b8ff2ca4a54ab 
16CD467E46E 1/Library/Caches/co 7 Zorn 
m.burbn.instagram.IGlmageCache/ la payatot 
49edac31765bded52bb4e71eea7f 

on/7 DCF 1696-B768-4516-96A4- 
ARE 16CD467E46E1/Library/Caches/co 
MD5: c6d7f8d02742ac6c28496453261bd m.burbn.instagram.IGImageCache/ 
54f 49edac31765bded52bb4e71eea7f 
2833 : 0x0 (Size: 54700 bytes) 
72 | Name: 2179965852489560015 Size (bytes): 94746 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 06:11:11(UTC+1) 
4207fa93345_files_full.zip/private/v DN P 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-25 06:11:11(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-25 06:11:11(UTC+1) 
Geen Pa eras Source file 373fd2e35eced36 1b8ff2ca4a54ab 
Han hata. = 4207fa93345_files_full.zip/private/v 
Ee o PEE ar/mobile/Containers/Data/Applicati 
015 on/77919778-DC8B-4FED-9F7E- 
ODB1B276E89C/Documents/com.s 
MD5: d471cc20ddc345b27d3c06a72279 nap.file_manager_3_SCContent_ca 
7ddc 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/2179965852489560 
015 : 0x0 (Size: 94746 bytes) 
73 Name: bd8e6592046032248f3e7a6385b6 | Size (bytes): 20016 
pom Created: 2021-02-25 06:15:28(UTC+1) 
Path: 373fd2e35eced361b8ff2ca4a54ab TUM es 
42071293345, files_full.zip/private/v | Modified: 2021-02-25 06:15:28(UTC+1) 
SS Dd Nakapila Accessed: 2021-02-25 06:15:28(UTC+1) 
on - - - - 

R Source file 373fd2e35eced361b8ff2ca4a54ab 
16CD467E46E1/Library/Caches/co 7 deiere 
m.burbn.instagram.IGlmageCache/ Pa HA a AG Al Made 
bd8e6592046032248f3e7a6385b6 

on/7DCF1696-B768-4516-96A4- 
Bani 16CD467E46E1/Library/Caches/co 
MD5: d0119eaa6b9dd7ab49ebc0e6a2d6 m.burbn.instagram.IGImageCache/ 
ad2d bd8e6592046032248f3e7a6385b6 
63bf : 0x0 (Size: 20016 bytes) 
74 | Name: 4293992140271145730 Size (bytes): 822551 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 10:01:38(UTC+1) 
4207fa93345_files_full.zip/private/v — "TT 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-25 10:01:38(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-25 10:01:38(UTC+1) 
map file manager d SCCOntent ca | Source file 373fd2e35eced361b8ff2ca4a54ab 
PPT ThBfa. = 4207fa93345 files full.zip/private/v 
PD. 40271145 ar/mobile/Containers/Data/Applicati 
730 on/77919778-DC8B-4FED-9F7E- 
ODB1B276E89C/Documents/com.s 
MD5: b2c298a1f1593d9dc80c1e0a6cd6b nap.file manager 3 SCContent ca 
858 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/4293992140271145 
730 : 0x0 (Size: 822551 bytes) 
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75 


Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 
4207fa93345 files full.zip/private/v Modified: 
ar/mobile/Containers/Data/Applicati odmed: 
on/77919778-DC8B-4FED-9F7E- Accessed: 
ODB1B276E89C/Documents/com.s 


ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- Accessed: 
0DB1B276E89C/Documents/com.s 


ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- Accessed: 
0DB1B276E89C/Documents/com.s 

nap.file manager. 3. SCContent ca Source file 
10df2d-08df-4a1 c-b8fe- 
96f409f9b03d/1389987708816974 
2465 


MDS: 541cd4dee386583bcdecba083d28 
881b 


78 
19F43A21/0BE@3x.ktx 


Created: 
Path: 373fd2e35eced361b8ff2ca4a54ab Modified: 
4207fa93345 files full.zip/private/v | Modified: 
ar/mobile/Containers/Data/Applicati | Accessed: 
on/06B4B7A0-A991-4F2E-B94A- 
D6285790191B/Library/SplashBoar | Source file 
d/Snapshots/scenelD/com.apple.m 
obilesafari-724627A4-A9DC-4685- 
8B62-FCF71AD444ED/F33BA54D- 
14B9-4AF9-B996- 
79F43A2170BE@3x.ktx 


MDS: 62e9df42f17cbada568763d4122bb 
528 


Name: 11189792456584331068 Size (bytes): 


nap.file manager 3 SCContent ca Source file 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1118979245658433 
1068 

MD5: f9347955bfc9de1709398f6c3b18a 
3d7 

76 | Name: 3191865343659618511 Size (bytes): 

Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 

4207fa93345_files_full.zip/private/v Modified: 


nap.file_manager_3_SCContent_ca | Source file 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3191865343659618 
511 

MD5: b5b64632737b93f7e326ee987cab 
3e51 

77 | Name: 13899877088169742465 Size (bytes): 

Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 

4207fa93345_files_full.zip/private/v Modified: 


Name: F33BA54D-14B9-4AF9-B996- Size (bytes): 


700984 
2021-02-25 10:01:38(UTC+1) 
2021-02-25 10:01:38(UTC+1) 
2021-02-25 10:01:38(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1118979245658433 
1068 : 0x0 (Size: 700984 bytes) 


165387 

2021-02-25 10:14:10(UTC+1) 
2021-02-25 10:14:10(UTC+1) 
2021-02-25 11:12:22(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
ODB1B276E89C/Documents/com.s 
nap.file manager 3 SCContent ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/3191865343659618 
511 : 0x0 (Size: 165387 bytes) 


156559 

2021-02-25 10:39:07(UTC+1) 
2021-02-25 10:39:07(UTC+1) 
2021-02-25 10:39:07(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
nap.file_manager_3_SCContent_ca 
10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1389987 708816974 
2465 : 0x0 (Size: 156559 bytes) 


186818 
2021-02-25 11:26:59(UTC+1) 
2021-02-25 11:26:59(UTC+1) 
2021-02-25 11:26:59(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
42071293345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/06B4B7A0-A991-4F2E-B94A- 
D6285790191B/Library/SplashBoar 
d/Snapshots/scenelD/com.apple.m 
obilesafari-724627A4-A9DC-4685- 
8B62-FCF7 1AD444ED/F33BA54D- 
14B9-4AF9-B996- 
79F43A2170BE@3x.ktx ` 0x0 
(Size: 186818 bytes) 
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Bild 1 


18:54 


4 Meddeland... 


Klart Booking 


Bekraftad 


Din boendebokning 


Bekraftelsenummer: 3140614205 [D 
Pinkod: 5596 [| 


Clarion Hotel Stockholm 


tikk 


9 Ringvagen 98, 10460, Stockholm 


Fa vagbeskrivning 


& +46 8 4621030 


Kontakta boendet 


Incheckning Utcheckning 
lór 13 feb. 2021 man 15 feb. 2021 
frán 15:00 till 12:00 


Administrera din bokning 
Regler fór boendet 


Totalt pris fór 2 rum och 2 nátter 


cirka 4 032 SEK & 
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Bild 2 

20:32 ul AG 8 

y PelleP t @ > 

sm Förundersökningsprotokoll (23 18) 

| A aktbil 325.pdf 
-- docdroid.net 

PELLEP 

Ár utanfór 


Sag henne o hissen 
Aina kolla som fan har utanfór 
Dom har span pa detta hotell 


O Skicka en chatt 


Kæ 
© 
© 
Qy 


QIWIEIRITIYIuliloIpPIA 


4 uZIXICIVIBINIM 
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Bild 4 
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Bild 6 
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Bild 7 
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Bild 8 
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D 


^ 
- 


TIPS 


Välkommen till iPhone X 
Tips för att komma igång 


Svep uppåt för att 
låsa upp 


atl 4G m) 
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Bild 12 


A ES 
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AA A facebook.com 


Profilbilder 


Rabi Mousa 


Profilbilder - 28 dec 2020 - 


Visa i fullständig storlek - Fler alternativ 


Mala 


Bild 13 
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Bild 15 
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Bild 16 
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Bild 17 
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Bild 19 
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Bild 21 
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/ 


N / Re / 
(> LI keh 


^ 
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Bild 23 
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Bild 24 
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16:34 al AG » 
& flashback.org 


Logga in v 


dil VCI AG d OVCTICVL, = VDUTRUE Val ala Va € U = 
nyhet an en liten notis . Just for att det anda hande 1930 , 
i ett lugnt omrade pa ett upplyst torg , med massa folk i 


närheten . 
= @ Citera 
Bi Idag, 15:18 + #138 
oo. Lem 837 


Enligt PM stämmer det att han heter Kim född 93. Han är 
fran Göteborg. 


< ® Citera 
Hy Svara w f « < v 
Stöd Flashback 


Flashback finansieras genom donationer fran 
vára medlemmar och besókare. Det ár med hjálp 
av dig vi kan fortsátta erbjuda en fri 
samhällsdebatt. Tack for ditt stöd! 


Swish: 123 536 99 96 
Bankgiro: 211-4106 


Flashback International Inc 
1461 First Avenue, New York, NY 10075-2201, USA 


A-O FAQ Regler Integritet Moderatorer 


Översikt Annonsera Kontakt 
RPR SE NO B SNE CES, 
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22:23 al 3G MB > 


8 booking.com 


Arken Hotel €: Art Garden Spa 


kkk 
Nordatlanten 100, Góteborg — Visa pa karta 


Bra 
7,7 484 recensioner 


Boka 2 natter nu 


Boendebeskrivning 


Arken Hotel & Art Garden Spa ligger i hamnområdet 
Arendal, bara 15 minuters bilresa från centrala 
Göteborg. Hotellet erbjuder gratis WiFi och en 
bokningsbar spaavdelning. Hår finns åven kostnadsfri 
parkering och en laddstation för elbilar. Alla ... 


Faciliteter 
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Bild 30 
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SVERIGE SWEDEN SUÉDE 


P naa 


— ang ag 


POLISMYNDIGHETEN na a h Ad 


IX«X«MAHADXABDULLAHI««««««««««««««««««« 
34«3SWE9610253M2106238199610250731««68 
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03:16 


sl 4G NB: 


& europcar.com 
A TUT u quyt J uuys 
More details 


Your vehicle will be allocated at the station. Please remember 
to bring the credit card noted above with you to the rental 


location for verification purposes. 


Stockholm Bromma Airport 
February 23, 2021, 3:00 PM 
February 28, 2021, 3:00 PM 


your vehicle 


Change > 


AUDI A4 AVANT AUT 4X4 2.0 Change > 


or similar 


Premium 


Base rate 


Pay later 
Estimate price based on 


exchange rate 


Guaranteed price 


Bild 32 


Minimum Age: 18 
Unlimited mileage 


Automatic Transmission 


On request © 


SEK 5,737.50 


SEK 5,737.50 


SEK 5,737.50 


VAT(See full T&Cs) 
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AA & europcar.se È; 


Europcar 


STOCKHOLM ULVSUNDA 


Biluthyrning 


O STOCKHOLM ULVSUNDA 


En Annan Återlåmningsplats? 
02.23.2021 O 10:00 
= 02.24.2021 © 10:00 
Jag är Jag bor i 
26+ W Sweden w 


Jag har ett kundnummer 


Bild 33 


300 


HEMLIG 
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Vgd fuckers 


1 "A 


302 
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13:19 7 ai ` = Ca 

AA & taxijakt.se ei 
— Ange telefonnummer « Tillbaka 
Meny 


Din bestållning 


E + Telefonnummer ex. +46709999999 


Email (valfritt, for kvitton och vårdekoder) 


LAGG TILL BETALKORT 


Ditt Pris 


659 SEK 


20% RABATT 


Betala i bilen 


Bild 36 
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TELEPHONE NO. FOR CHECK OF VALIDITY 
SWEDISH POLICE «46 77 114 14 00 
— P — m 


SVERIGE SWEDEN 2UED« 


E d od Cose 
L| 
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Bild 38 


P 
J j Provtagning com 
på Birger Jarlsgatan 39, SE-111 45 Stockholm 

sales Qprovtagning.com 

PROVIAGNING 


To whom it may concem 


Covid-19 RT PCR-Test 


This is to certify that 

MUHAMMED KHALID, AL! 

Date of Birth 0101 Aa 
Citizenship: Sweden 
Passport Number: 
Personal Identity Number. 0101 E | 


Has been tested NEGATIVE for SARS-CoV-2 (Covid-19) with a RT-PCR nucleic acid test 
Date of test: 23" of February 2021 at 10:15 AM 


Stockholm 23" of February 2021 


Dr. Apostolos Mintoglou 
GPMD 


Doktorgruppen Beger Jartegatan 39 Mai sales Doruvtagrmg com 
Provtaaning com SE-111 45 Stockholm 
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Bild 39 


Les 
pl | Provtagning com 
a. Birger Jarisgatan 39, SE-111 45 Stockholm 
sales@provtagning. com 


PROVTAGNING 


To whom it may concern 


Covid-19 RT PCR-Test 
This is to certify that 

STEFAN ZORAN, ALEKSIC 

Date of Birth 010604- 
Citizenship Sweden 


Passport Number 


Personal identity Number- 010604 MS 


Has been tested NEGATIVE for SARS-CoV-2 (Covid-19) with a RT-PCR nucleic acid test. 
Date of test: 23” of February 2021 at 11:00 AM 


Stockholm 23" of February 2021 
Pelz 


Dr. Apostolos Mintoglou 
GPMD 


QR-code for 
Certificate Validation: 


Doktorgruppen Birger Jarlsgatan 39 Mail. salesfiprovtagning com 
Provtagning com SE-111 45 Stockholm 
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Bild 40 


E 
på Birger Jartsgatan 39, sm 45 Stockholm 
sales provtagning com 
PROVTAGNING 
To whom it may concern 
Covid-19 RT PCR-Test 
This is to certify that 


MAHAD ABDULLAHI, ALI 


Date of Birth: 961025-0731 
Citizenship: Sweden 
Passport Number: 91639034 
Personal Identity Number. 961025-0731 


Has been tested NEGATIVE for SARS-CoV-2 (Covid-19) with a RT-PCR nucleic acid test. 
Date of test: 23” of February 2021 at 10:45 AM. 


Stockholm 23" of February 2021 


Doktorgruppen Birger Jarisgatan 39 Mait sales @provtagning com 
Provtagning com SE-111 45 Stockholm 
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EE 
pl Provtagning com 
I Birger Jarisgatan 39, SE-111 45 Stockholm 
sales @provtagning.com 
PROVTAGNING 


To whom it may concern 
Covid-19 RT PCR-Test 


This is to certify that 


FERDI, KUCUKGOL 
Date of Birth 990521 
Citizenship: Sweden 


Passport Number EE 
Personal Identity Number. 990521 a 


Has been tested NEGATIVE for SARS-CoV-2 (Covid-19) with a RT-PCR nucleic acid test. 
Date of test: 23” of February 2021 at 10:30 AM 


Stockholm 23" of February 2021 


Dr. Apostolos Mintoglou 
G.P M.D 


QR-code for 
Certificate Validation: 


Doktorgruppen Birger Jarisgatan 39 Mail salesfzprovtagning com 
Prortagnina com SE-111 45 Stockholm 
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Bild 42 
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kh 
kriget i goteborg 41m 


@KRIGET_I_GOTEBORG 


| tak 
NG |! 
MVH AER | 


Skicka meddelande 
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i kriget_i_goteborg 40m 


Skicka meddelande 
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a 
kriget_i_goteborg 2h 


Hahahha bror jag och 4 vanner 
gick in i tynnered och bade 
markera och gahla folk som 

ar aldre an oss dom snackar 
bar bakom skarmen men allt 


harifran vet att tynnered barn 
inte vagae gora nagot och ar 

radda for frolunda jag svar pa 
min morsa d har ar sant 


Skicka meddelande 
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i kriget_i_goteborg 42m 


Skicka meddelande 


Bild 47 
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LI 
kriget i goteborg 2h 


Frolundas falang misshandlade 
tynnered i deras egna trakt, 
tynnered ar ett stort skamt 


O áven tynnereds gangledare 
blev klippt pá öppengata vid 
frölunda torg 


Sen dess har ingen i tynnered 
vågas synas o låmnat helt, 
frölunda falangen har kört över 
tynnered totalt och har stor 
makt och även alierade med 
alikhan släkten o hela hjällbo 


Skicka meddelande 
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Skicka meddelande 
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Bild 50 
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Bild 51 
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Bild 53 
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05:12 Ail ^ 
a gp.se 


Göteborgs-Posten ` d @ = 


De befann sig då på en parkeringsplats i danska 
Lyngby. I ett obevakat ögonblick såg mannen sin 
chans att fly — och tog den. 


Gårningsmånnen lyckades dock hålla sig undan 
fram till slutet av november. 


Då greps fyra mån i Herlevs kommun, norr om 
Köpenhamn, och det skedde inte av en slump. På 
Twitter beråttade dansk polis att tillslaget var 
resultatet av en lång spaningsinsats. 


Kidnappningshåndelsen år emellertid inte det 
enda brott de fyra Göteborgskillarna misstånks 
för. 


Planen: Språnga vårdedepå och elda 
bussar 

Utredningen visar att de under sensommaren och 
hösten 2019 förberett ett rån mot 
vårdehanteringsföretaget Loomis penningdepå i 
Köpenhamnsförorten Tástrup. 


- Det hår år personer med kapacitet att försöka 
genomföra ett brott av den hår 
storleksordningen. Några av dem år till exempel 
vapentrånade i utlandet, såger kommissarie Dan 
Windt, chef för lokalpolisområde Syd i Göteborg. 


Bild GE 
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Bild 56 


18:40 il ^ de 


& dn.se 


DN. Loggain 


Om vára annonser 


|STHLM 

Aklagare: "Polisen fórhindrade 
ett mord pa kánd 
gángkriminell” 


UPPDATERAD 2019-03-13 PUBLICERAD 2019-03-12 


RÄV = AUN f 
Tva Kalasjnikovs slangdes ut ur bilen nar biljakten pa 
mannen inleddes. De patraffades efter flyktvagen. Pilarna 
visar pa ammunition som ocksa slangdes ut. Foto: Polisen 


Nar den utpekade gangledaren for 
Bredångsnåtverket, som skóts till dóds 
under en biljakt i Marieháll, begravdes 
bar de hans kista. Nu star mánnen infór 
råtta, atalade för förberedelse till mord 


och två grova vapenbrott. Enligt 
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Bild 57 


19:16 “ll 4G U) 
AA 8 airbnb.se C 
X 
Din resa 

INCHECKNING UTCHECKNING 
2021-02-25 2021-02-28 
GASTER 

2 gaster 

828 kr x 3 nätter (2) 2 484 kr 
Specialerbjudande: 8% rabatt (?) -199 kr 
Serviceavgift © 403 kr 
Totalt 2 688 kr 


Boka nu och spara 25% Lidija ® 
erbjuder en engangsrabatt for 
dina resdatum. Boka snart for 


att fa detta 


Reservera 


< 


nm a 
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Han vet ingenting han har blivit kidnappad 1 
kanin om ni vill ha eran bror tbaka 
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CO) 


5 ki o balen vilken jåvla resa 
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Bild 62 
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23:26 il 4G m 


4,” Ruglömederbort en storanama X 
i Tynnered fran M-falangen 
Mahad kallas for woria G nu 
han har muckat de ar mangai 
Frölunda som år rådda för hans 
namn de år han som ligger 
bakom alla mord Tynnered 
han år tjockens hitman han 
satt inne 2ar sen nu når han 
kom ut de börja hånda saker 
de år såkert han som ligger 
bakom den skjutning i Sthim 
riktigt fet kille. Dom hår små 
snorungarna i Frölunda suger 
av honom och deras som 
kallade åldre ziad år livrådd för 
honom 


Plus han har många kontakter 
han själv kör över G falangen 
han har gjort så mkt mer han är 
kände runt Sverige filterlös kille 
minst han har gjort 10-11 mord 


Skicka meddelande 
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00:02 a 4G 85) 
< gbg_gangwars ... 
2 891 78 
Inlagg Foljare Följer 


GBG 

INLÄGG OM HÄNDELSER I GÖTEBORG I I 
STÅR INTE PÅ NAGONS SIDA I 

NÄMNER INGA NAMN GD 

SKICKA INFORMATION OCH BILDER I DM I 
Följs av omaar.r och titow_.1 


Det hår kontot år privat 
i ©) ) Följ det har kontot för att se dess foton och 


videoklipp. 
Förslag för dig Visa alla 


J3bsmx B.A k 


Absmx libertaa7 


VEE 
BE: 


nad 8 0 6 


Bild 65 


Bilaga 2.2 Bilder - fórstoring, 2023-11-01 14:47 diarienr: 5000-K189802-21 332 


«ill Comviq => 00:27 46 % 19) 


«e D O 


a D g _g an q wars 


Din lilla kuksugare du tror att du 
kan skriva vad du vill om folk och 
att du e gron for du har vpn 


Men inte lange till 


Ska ge dig ett tips stáng aldrig av 
din vpn 


Ja sa jag námner inga namn á jag 
lagger respekt t folk 


ag Som ja gjorde t dig i borjan 
Dubbeltryck for att gilla 


Assa namner inga folk haaaa 


Du skriver om tnd och skriver om 
tjocken haaa 


Om du stanger av din vpn det 
kommer bli det sista du gor 


O Meddelande ... ES m 


Bild 66 
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Bild 68 
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Ojshemen ote 
Nasjonalpark 
NORGE 
S „Lillehammer 
pamar 
gervidda e ot illestrøm 
p 
val Park Oslo? 
n 4 
I 
NET | T 
| 
ookien mg ofredrikstad 
gtarvik: "y 
| 
4 
bk ` 
/ 
7 
Kristiansand 3 N Arg 
PAGA. EQ CA 


Arbete Lagg till 


O 


OKarista 
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Bild 70 
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AA ê secure.booking.com Q, 


NAG AND Uit IVIYL ACT IVE 


Booking 
Y Grattis! Din bokning är nu 
bekräftad. 


Vi har skickat din bokningsbekräftelse till 
mahad a996@hotmail.com 


Uppdatera din e-postadress 


ES Boendet sköter alla betalningar. Läs mer 
om hur du betalar här nedanför eller ring 
boendet på +46 54 67 00 00. 


w Du kan ändra din bokning online når som 


helst 
Bekräftelsenummer PIN-kod 
2380.437.025 8388 


Allt för din resa, på ett och samma ställe 


[9 Ladda ner bekräftelse X 


TAXI _Chauffören väntar pá dig och kör dig 
< 6 m © 
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Extraction Report - Apple iOS Full File system 


Data Files (19) 


e*. * 
KL D 
Zeg 


Cellebrite 


www.cellebrite.com 


Videos (19) 
# File Info Additional file info Thumbnail | Deleted | 
1 Name: 14597307948678996609 Size (bytes): 1163413 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 00:21:00(UTC+1) 
4207fa93345_files_full.zip/private/v ET ue 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 00:21:00(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-14 00:21:00(UTC+1) 
en Source file 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager 3 SCContent ca : dois 
ir zi T 42071293345 files full.zip/private/v 
dM dU ar/mobile/Containers/Data/Applicati 
ee N len, on/77919778-DC8B-4FED-9F7E. 
0DB1B276E89C/Documents/com.s 
MD»: fd392dfc0b922f2f62b90f3944ebc9 nap.file_manager_3_SCContent_ca 
56 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1459730794867899 
6609 : 0x0 (Size: 1163413 bytes) 
2 Name: 13886533954932771870 Size (bytes): 1517655 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 16:16:35(UTC+1) 
42071293345 files full.zip/private/v ELSE. AS 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 16:16:35(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-14 16:16:35(UTC+1) 
EN | Seurcefile 373fd2e35eced361b8ff2ca4a54ab 
nap.file_manager_3_SCContent_ca 42071293345 files full.zip/private/ 
ee 1e bafe" arimobile/Containers/Data/Applicati 
ANA 388653395493277 0n/77919778-DC8B-AFED-9FTE- 
ODB1B276E89C/Documents/com.s 
MD5: 2bb9e5ed869821d1965c745d9537 nap.file manager 3 SCContent ca 
c130 10df2d-08df-4a1c-b8fe- 
967409f9b03d/1 388653395493277 
1870 : 0x0 (Size: 1517655 bytes) 
3 Name: 13205021467146358958 Size (bytes): 2594723 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 18:10:53(UTC+1) 
4207fa93345 files full.zip/private/v VE BEN 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 18:10:53(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-14 18:10:54(UTC+1) 
CENA RA DAAN Source file 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager 3 SCContent ca 42071293345 files full.zip/private/ 
la Srmoblle Containere! Data/Applicati 
dal 320502146714635 0n/77919778-DC8B-AFED-9F7E- 
ODB1B276E89C/Documents/com.s 
MD5: 6880e4bdd919f1cc0558ef8bafcc18 nap.file manager 3 SCContent ca 
d4 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1320502146714635 
8958 : 0x0 (Size: 2594723 bytes) 
4 Name: 18188217790755820312 Size (bytes): 1249875 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-14 18:30:34(UTC+1) 
4207fa93345_files_full.zip/private/v i N "ra 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-14 18:30:34(UTC+1) 
NAG Ga Accessed: 2021-02-14 18:30:34(UTC+1) 
ocuments/com.s 
nap.file manager 3 SCContent ca | Source file ra a] nen 
10dt2d dn ar meblle Containere! Data/Applicati 
Geert 818821779075582 On/77919778-DC8B-4FED-9F7E. 
ODB1B276E89C/Documents/com.s 
MD5: d23deec595731fe0a20515372abdf nap.file manager 3 SCContent ca 
4a8 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1818821779075582 
0312 : 0x0 (Size: 1249875 bytes) 
5 Name: 4227528025789708543 z1015839 | Size (bytes): 488619 
? 114486649601 Created: 2021-02-14 20:19:28(UTC+1) 
ath: 373fd2e35eced361b8ff2ca4a54ab Bun: 
42071293345 files_full.zip/private/v | Modified: 2021-02-14 20:19:28(UTC+1) 
mure dn curia Accessed: 2021-02-14 20:19:29(UTC+1) 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s | Source file AE T ee 
nap.file_manager_3_SCContent_ca j bil NG a OS | DEAE M 
10020 nar da bf er Dat Appel 
96f409f9b03d/42275280257 89708 0DB1B276E89C/D E å / 3 
543 710158397744866479601 J MN 
nap.file_manager_3_SCContent_ca 
MD5: a87e1035386c7a67800eff6f6dbd4 10df2d-08df-4a1c-b8fe- 
8c3 96f409f9b03d/4227528025789708 
543 710158397744866479601 : 
0x0 (Size: 488619 bytes) 
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Bila 
6 


2d6 


10df2d-08df-4a1c-b8fe- 
96f409f9b03d/4226521476188449 
108 : 0x0 (Size: 688335 bytes) 


Name: 4480407709622053340 71789502 | Size (bytes): 1775146 
SO Tan Created: 2021-02-16 03:06:32(UTC+1) HEMLIG 
Path: 373fd2e35eced361b8ff2ca4a54ab aa: M" 
42071293345. files. full.zip/privateyv | Modified: 2021-02-16 03:06:32(UTC+1) e 
ar/mobile/Containers/Data/Applicati | Accessed: 2021-02-16 03:06:34(UTC+1) v 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s Source file te ne b8ff2ca4a54ab 
nap.file manager 3 SCContent ca 07fa93345 files full.zip/private/v 
10dí2d-08df-4a1c-b8fe- ar/mobile/Containers/Data/Applicati 
96f40919b03d/4480407709622053 ON ANGGE I Å 
340 -217895026267427478952 nap file manager 3 SCContent ca 
MDS: 4e49ef54d3a9fba34df9cba0f75112 10df2d-08df-4a1c-b8fe- 
c9 96f409f9b03d/4480407 709622053 
340 z17895026267427478952 : 
0x0 (Size: 1775146 bytes) 
7 Name: 17535379013467586031 z385262 | Size (bytes): 1577076 
PER ES Es Created: 2021-02-16 11:35:18(UTC+1) 
Path: 373fd2e35eced361b8ff2ca4a54ab PNE ^L 
42071293345, files_full.zip/private/v | Modified: 2021-02-16 11:35:18(UTC+1) 
ar/mobile/Containers/Data/Applicati | Accessed: 2021-02-16 11:56:09(UTC+1) 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s Source file 373fd2e35eced361 b8ff2ca4a54ab 
nap.file manager 3 SCContent ca 4207fa93345 files full.zip/private/v 
1 Odf2d-08df-4a1c-b8fe- a ar/mobile/Containers/Data/Applicati 
96f409f9b03d/1753537901346758 A E o UE 
6031. z3852621024195818852 nap.file manager 3 SCContent ca 
MD5: 98119fb536b04b3aa5 1b7d82adb6 10df2d-08df-4a1c-b8fe- 
c792 96f409f9b03d/1753537901346758 
6031 z3852621024195818852 : 
0x0 (Size: 1577076 bytes) 
8 Name: 10424013450513099805 z342076 | Size (bytes): 1570710 
01185862299684 Created: 2021-02-16 11:35:18(UTC+1) 
Path: 373fd2e35eced361b8ff2ca4a54ab SEEN KON 
4207fa93345 files full.zip/private/v | Modified: 2021-02-16 11:35:18(UTC+1) 
ar/mobile/Containers/Data/Applicati | Accessed: 2021-02-16 11:56:10(UTC+1) 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s Source file eel b8ff2ca4a54ab 
nap.file manager 3 SCContent ca 07fa93345 files full.zip/private/v 
10df2d-08df-4a1c-b8fe- ar/mobile/Containers/Data/Applicati 
9640919b03d/1042401345051309 EL eee hee n 
= nap.file manager 3 SCContent ca 
MD5: 1d624f72b666c56d778856d9ff50b 10df2d-08df-4a1c-b8fe- 
6f1 96f409f9b03d/1042401345051309 
9805 z3420760185862295834 : 
0x0 (Size: 1570710 bytes) 
9 Name: 5461983690970207647 Size (bytes): 444903 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-22 03:29:49(UTC+1) 
4207fa93345 files full.zip/private/v gr ER 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-22 03:29:49(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-22 03:29:49(UTC+1) 
EE De | Source file 373fd2e35eced361b8ff2ca4a54ab 
p.file_manager_3_SCContent_ca = S x 
10df2d-08df-4a1c-b8fe- ee ee 
96f409f9b03d/546 1983690970207 ap EN IS m EE 
on/77919778-DC8B-4FED-9F7E- 
bagi ODB1B276E89C/Documents/com.s 
MD5: 0ed366aa64bbbf45d1cc1f74718e6 nap.file manager 3 SCContent ca 
125 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/5461 983690970207 
647 : 0x0 (Size: 444903 bytes) 
10 Name: 17057422906491364814 Size (bytes): 1754553 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 01:17:13(UTC+1) 
4207fa93345_files_full.zip/private/v EN ds; 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 01:17:13(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-24 01:17:14(UTC+1) 
DEE | source file 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager 3 SCContent ca 22 z à à 
Nose Dba chao EE 
96f409f9b03d/1705742290649136 ar 
on/77919778-DC8B-4FED-9F7E- 
4814 ODB1B276E89C/Documents/com.s 
MD5: 5f4d786f79c22276ab84c3c1aee91 nap.file manager 3 SCContent ca 
989 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1705742290649136 
4814 : 0x0 (Size: 1754553 bytes) 
11 | Name: 4226521476188449108 Size (bytes): 688335 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 01:17:14(UTC+1) 
4207fa93345_files_full.zip/private/v TN 47. 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 01:17:14(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-24 01:17:14(UTC+1) 
a Source file 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager 3 SCContent ca Å : 
10df2d-08df-4a1c-b8fe- en EE 
96f409f9b03d/4226521476188449 armogpile,Sontamners ata App Icat 
on/77919778-DC8B-4FED-9F7E- 
108 ODB1B276E89C/Documents/com.s 
MD5: 690cbe8e8 139e55807fb48d3d69f9 nap.file manager 3 SCContent ca 


6905 


4207fa93345 files full.zip/private/v 
ar/mobile/Media/DCIM/100APPLEI/I 
MG 0096.MP4 : 0x0 (Size: 
5204877 bytes) 
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12 Name: 524793677 1058335370 Size (bytes): 1631926 x HEMI I G 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 02:22:45(UTC+1) 
4207fa93345_files_full.zip/private/v Ads ER 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 02:22:45(UTC+1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-24 02:22:46(UTC+1) 
nap file manager 3 SCContent ca | Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2d-08df-4a1c-b8fe- = 4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
96M0919b03d/524793677 1 058335 on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
MD5: 193e86098338f6caa86f01050a16e nap.file_manager_3_SCContent_ca 
572 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/52479367 71058335 
370 : 0x0 (Size: 1631926 bytes) 
13 Name: 2379252293998364734 75487940 | Size (bytes): 1049278 
- APA Created: 2021-02-24 20:24:49(UTC+1) 
ath: 373fd2e35eced361b8ff2ca4a54ab PEN 
4207fa93345 files_full.zip/private/v | Modified: Ge 
ar/mobile/Containers/Data/Applicati | Accessed: 2021-02-24 20:24:51(UTC+1) 
SE ile 373fd2e35eced361b8ff2ca4a54ab 
nap.file manager. 3 SCContent Ca 4207fa93345 files full.zip/private/v 
10df2d-08df-4a1c-b8fe- = ar/mobile/Containers/Data/Applicati 
96f40919b03d/2379252293998364 on/77919778-DC8B-4FED-9F7E- 
734 25487940372872252701 0DB1B276E89C/Documents/com.s 
= nap.file_manager_3_SCContent_ca 
MD5: c87ebad408062ee1c1e101afeb8e 10df2d-08df-4a1c-b8fe- 
bad1 96f409f9b03d/2379252293998364 
734 z5487940372872252701 : 0x0 
(Size: 1049278 bytes) 
14 | Name: 162635857484 1032624 Size (bytes): 1891871 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-24 20:24:52(UTC+1) 
4207fa93345 files full.zip/private/v "NES GR 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-24 20:24:52(UTC+1) 
on/77919778-DC8B-4FED-9F7E- | Accessed: 2021-02-24 20:24:52(UTC+1) 
Ge eege TEE | Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2 d-08df-4a10-b8fe- = 4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
Ja 626358574841032 0n/77919778-DC8B-4FED-9F7E. 
0DB1B276E89C/Documents/com.s 
MD»: cc7274619795a5331c970a7b7ac6 nap.file manager 3 SCContent ca 
c954 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1626358574841032 
624 : 0x0 (Size: 1891871 bytes) 
15 Name: 16109286666264533292 Size (bytes): 1240808 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 02:56:33(UTC+1) 
4207fa93345_files_full.zip/private/v EAR EG. 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-25 02:56:33(UTC 1) 
on/77919778-DC8B-4FED-9F7E- Accessed: 2021-02-25 02:56:35(UTC+1) 
GE 373fd2e35eced361b8ff2ca4a54ab 
10df2d-08df-4a1c-b8fe- ig 4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
Seel 610928666626453 0n/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Documents/com.s 
MDS: 3d05b708b894ccc19731073fa61ac nap.file_manager_3_SCContent_ca 
e15 10df2d-08df-4a1c-b8fe- 
96f409f9b03d/1610928666626453 
3292 : 0x0 (Size: 1240808 bytes) 
16 | Name: 8267428812867997299 Size (bytes): 542274 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 03:14:51(UTC+1) 
4207fa93345 files full.zip/private/v TES Ee 
ar/mobile/Containers/Data/Applicati Modified: 2021-02-25 03:14:51(UTC+1) 
on/77919778-DC8B-4FED-9F7E- | Accessed: 2021-02-25 03:16:10(UTC+1) 
nap file manager 3. ScComiont ca | Source file 373fd2e35eced361b8ff2ca4a54ab 
10df2d-08df-4a1c-b8fe- E 4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
36f409f9b030/8267428812867997 on/77919778-DC8B-4FED-9F7E- 
ODB1B276E89C/Documents/com.s 
MD5: ef822229c06858abef0c1611a1a02 nap.file_manager_3_SCContent_ca 
024 10df2d-08df-4a1c-b8fe- 
96f409F9b03d/82674288 12867997 
299 : 0x0 (Size: 542274 bytes) 
17 |Name: IMG 0096.MP4 Size (bytes): 5204877 
Path: 373fd2e35eced361b8ff2ca4a54ab | Created: 2021-02-25 04:26:15(UTC+1) 
42071293345 files full.zip/private/v PS CAN 
ar/mobile/Media/DCIM/100APPLE/| | Modified: IA) 
MG_0096.MP4 Accessed: 2021-02-25 04:26:15(UTC+1) 
MD5: 1c5051faae570aa4a53bbba27232 | Source file 373fd2e35eced361b8ff2ca4a54ab m 
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Bil 
IE ila 


Name: 


Path: 


MD5: 


Name: 


Path: 


MD5: 


cm-chat-media-video- 
eMfPWBEd2z1xhX79ZemxN.mov 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Library/Persistent/ 
SCMedia/cm-chat-media-video- 
eMfPWBEd2z1xhX79ZemxN.mov 


df4fc334f603466afe6c2811504d24 
a4 


cm-chat-media-video- 
gZA0rQZiz6wGe/z3esh2R.mov 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Library/Persistent/ 
SCMedia/cm-chat-media-video- 
qZAOrQZizewGe7z3esh2R.mov 


9b24577ec0adf1dacf83af8481663 
904 


Size (bytes): 


Created: 
Modified: 
Accessed: 
Source file 


Size (bytes): 


Created: 
Modified: 
Accessed: 
Source file 


2026078 

2021-02-25 10:01:37(UTC+1) 
2021-02-25 10:01:37(UTC+1) 
2021-02-25 10:01:37(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345_files_full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Library/Persistent/ 
SCMedia/cm-chat-media-video- 
eMfPWBEd2z1xhX79ZemxN.mov ` 
0x0 (Size: 2026078 bytes) 


1858877 

2021-02-25 10:01:39(UTC+1) 
2021-02-25 10:01:39(UTC+1) 
2021-02-25 10:01:39(UTC+1) 


373fd2e35eced361b8ff2ca4a54ab 
4207fa93345 files full.zip/private/v 
ar/mobile/Containers/Data/Applicati 
on/77919778-DC8B-4FED-9F7E- 
0DB1B276E89C/Library/Persistent/ 
SCMedia/cm-chat-media-video- 
qZA0rQZiz6wGe7z3esh2R.mov : 
0x0 (Size: 1858877 bytes) 
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Video 1 


Video 2 
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Video 3 


Video 4 
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Video 5 


Video 6 
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Video 7 
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Video 8 


Video 9 


Bilaga 3.2 Video - fórstorade dumpar ur filmklipp, 2023-11-01 14:47 diarienr: 5000-K189802-21 


354 


Video 10 
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Snapchat Report 


Fran tómningen av beslagtagna telefonen 2021-5000-BG24357-10 har hamtats information om 
telefonens Snapchat-konto. Detta genom en typ av tómning som resulterar i en Snapchat Report. 


I detta dokument redovisas inte samtligt innehåll i Snapchat report utan ett urval som bedöms ha 
betydelse för utredningen. Viss del av innehállet har áven extraherats i telefontömningen som gjorts i 
UFED. Tider i brödtexten i detta dokument anges i svensk reell tid. Tider i presenterade tabeller 
anges i UTC-tid. 


Snapchat-kontot på telefonen har Username "mahadmose4211": 


userId | rowid username | 
cal0d£2d-08df-4a1c-b8fe-96f409£9b03d [111516 mahadmose4211 | 


Konversationer 


1. Ur det extraherade materialet syns en konversation med anvándaren ”ang3lo 5”. 
Tidsangivelserna i rapporten visar på UTC-tid vilket innebar att för att fa reell svensk tid låggs 
1 timma till (svensk vintertid). 


2021-02-24 kl 14:38:32 (svensk reell tid) skickar ”ang3lo 5” ett meddelande med innehållet 
”bror haru wickr nånting”. 


2021-02-24 kl 14:50:05 (reell svensk tid) skickar ”mahadmose4211” ett meddelande med 
innehållet ”Lowlife421”. 


[uman] 
[ca 10df2d-08df-4alc-b8fe-96£409£9b03d | 11516 Ímahadmose42 11 | 
7e047386-0472-4fe7-a0ce-1febbe50a494 [11506 ang3lo 5 


Client Conversation ID | Message Content |Creation Timestamp UTC+0|[Read Timestamp UTC+0 | Content Type | Sender ID ] Server Message ID 
04d2d5ec-776b-5ecc-a865-S0edcal06d05| bror haru wickr nánting|2021-02-24 13:38:32 ]2021-02-24 13:51:49 a |[72047386-0472-4fe7-a0ce-1febbe50a494] 16 
04d2d5ec-776b-5ecc-a865-S0edcal06d05|Lowlife421 [2021-02-24 13:50:05 1970-01-01 00:00:00 1 |ca10df2d-08df-4alc-b8fe-96£409£9b03d ||17 
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2. Ur det extraherade materialet syns en konversation med användaren "adamlazarevic". 
Tidsangivelserna i rapporten visar pa UTC-tid vilket innebar att for att fa reell svensk tid laggs 
1 timma till (svensk vintertid). 


2021-02-17 kl 19:43:09 skickar ”adamlazarevic” ett meddelande innehállande ett 
telefonnummer "0733004900". 


2021-02-17 kl 19:43:41 skickar ”mahadmose4211” ett meddelande med innehållet "+46 79- 
022 36 62”. 


userId | rowid username | 
calQdf2d-08df-4alc-bSfe-96£409£9b03d | 11516 [mahadmose42 11 | 
| bfa8b179-3ad9-4d3a-a9a7-d51bf122057d | 11484 ladamlazarevic | 


Client Conversation ID Message Content |Creation Timestamp UTC+0 [Read Timestamp UTC-0| | Content Type | Sender ID - |[Server Message ID 
5812047a-6580-3Tcb-a394-b022e8949865 [0733004900 |D02102-17184309 — — |2021-02-17 18:43:11 å ]pfaSb179-3ad9-4d3a-2927-35 108422057811 
[3812047a-6580-57cb-a39d-b022e89498c5||+46 79-022 36 62 2021-02-17 18:43:41 2021-02-17 18:43:42 1 cal0d£2d-0Sdf-Aalc-bSfe-96f409f9b03d |14 
38120472-6580-57cb-a39d-b022e89498c5 Kvickensvágen 5 |2021-02-17 18:44:01 [2021-02-17 18:44:02 1 |bfa8b1 79-3ad9-4d3a-a9a7-d51bf422057d|18 


3. Ur det extraherade materialet syns en konversation med ”mirettemilaja”. Av konversationen 
kan man utlasa att parterna skriver karleksfulla meddelanden till varandra som tyder pa att 
de har en karleksrelation. 


Tidsangivelserna i rapporten visar pa UTC-tid vilket innebar att for att fa reell svensk tid laggs 
1 timma till (svensk vintertid). 


2021-02-04 kl 20:26:04 har "mirettemilaja" skickat ett meddelande med innehållet "Va 
tvungen góra ny Mail o den ár 
mahadmose96@outlook.commailto:mahadmose96@outlook.com”. 


2021-02-24 kl 18:52:56 skickar ”mirettemilaja” meddelandet ”Mahad abdullahi ali!” 
2021-02-24 kl 18:53:05 skickar ”mahadmose4211” meddelandet ”Va hahahha”. 
2021-02-24 kl 18:53:20 skickar ”mahadmose4211” meddelandet ”Mirette Bollström”. 
2021-02-24 kl 18:53:29 skickar ”mahadmose4211” meddelandet ”Studievågen 43 vad 
hánder”. 

2021-02-24 kl 18:54:15 skickar ”mirettemilaja” meddelandet “Hahahahha du år inte rolig att 
pranka”. 

2021-02-24 kl 18:54:26 skickar "mahadmose4211" meddelandet "Hahahhahaha jaa vet 
baby”. 

2021-02-24 kl 18:54:52 skickar ”mirettemilaja” meddelandet "Hahahah de meningen att du 
skulle tro jag va arg fór jag sa hela ditt namn ju”. 
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"o aaa rovid | username] 
cal0df2d-08df-4alc-b8fe-96f4099b03d [11516 mahadmose4211 ] 
aed38a7a-f7b8-4cb1-bc59-fef2612ea334 


HEMLIG 


Client Conversation ID Message Content TET ap | FAS Timestamp | Content Type Sender ID M a 
LZ 620-5129 — (Hall vilken av Disney prinsessorna är din favorit ? 2021-01-15 23:35:04 [20210115 1 RS Je 
Ke [Alls ar min Favorit 2021-01-15 23:36:24 PIO? | båfe-96si09596034 |75 
E [Men du ar också de 2021-01-15 233631 Bez | o [76 
Ke [Plá klänning skulle ja säga haha 2021-01-15 23:36:43 PIA | Fe — [7 
Poseer |Haahaha yeey 2021-01-15 23:36:55 ps9 | Ga Fr 
VC Hahah varför ville du leka gullig mitt i allt 2021-01-15 23:37:10 [222101115 1 scar rb all 7 
aa Haba jag är gullig baby pozr-or-152337:56 Dr |} or P 
Ser kan CIDIIT DM AN 3 NT 
se [Mirentemilaja 2021-01-20 22:26:50 1 ese ill s 
a — O 0T 
c mm TD IM GEM 00H D 
Se fom TH MN NDS 
eo — O | AZ 
Hadatbda-6ada 5329... (Va tvungen göra ny Mail o den år mahadmose96 Zereck commailto:mahadmose96@outlook.com 2021-02-03 19:26:04 [2021-02-04 1 xr uM m 
HSdaib2a-Sa92-5429- — |htps-www.aftonbladet se nyheter/a KRQwev atal-efer-stort-kokainibeslag-i abona Peraza F kalOdPd0Sddale- — [ioi 
b29e-a2e10ac232fe — |goteborghitps://www.aftonbladet se/nyheter/a/kR Qwev/atal-efter-stort-kokainbeslag-i-goteborg [03:01:31 b8fe-96£10989b03d 
Ke, een 2021-0223 23:15:10 D | beresenoosboa Pie 
EE mante Fuss ke 
Lae bada 5:29... Hahaha baby hur kan du ibte vakna 2021-02-24 12:09:20 (021-0224 1 venei 
ET aas ICONE T 034807 
VE ` — Hahahahahahaha 2021-02-24 16:51:29 Kar 1 er [sue 
ra e Si 7 ke 
VE NC — Va hahahha 2021-02-24 17:53:08 [2024-02-24 1 Error be 
n Kanan O a C407 
GE m ITO a fu 
e (Hahahahha du är inte rolig att pranka 2021-02-24 17:54:15 [P02110224 ] serve E 
oue A (Hahahhahaha jasa vet baby 2021-02-24 17:54:26 RUM 1 en 10004 050F hale 15469 
13dadb2a-6292:3129-— (ahahah de meningen att du skulle tro jag va arg för jag sa hela ditt namn ju 2021-02-24 17:54:52 [P0210224 1 oe Ne 
SE fn E pran I komme fm 
VERT |Åtminstone kan du låsas nästa gång hahaha 2021-02-24 17:55:13 [2021-0224 1 VE: vi 
VC [Hahahhahaha oki baby nästa gång 2021.02.24 17:55:31 | 1 ose [es 
dar EC ` [Vet du vad? Jag har en fin idé 2021-02-24 18:01:12 [2021-02-24 1 EE 77 
a m IUUD a — C307 
Ki — [Du kunde bli min pojkvän & 2021-02-24 18:03:10 os |} e ald 
Ki Beie vill inte juu 2021-02-24 18:03:31 |! e dd 
e Men jag tanker bli din flickvän andá 2021-02-24 18:03:55 [P021-0224 1 a Jw 
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CT muse a pe 
Lae Sada |Detror jag inte 2021-02-24 18:05:37 071-02-24 1 E |5a80 
[45dadb2a-6a9a-5429- — [lhmps:/avww youtube com watch”app=desktop&v=MaUlimSglEEhntps- www.youtube com watch? 021.024 18:05:44 [2021-02-24 i aeds8a7a-FrbSdebl- ` Le 
lb29e-a2elOac232fc = |app=desktop&v=MaUlimSqiEE 18:05:46 |bes9-fef2612ea334 

a5dadb2a-6a9a-5429- ERROR - Something went wrong when parsing this message. Manually verify the message with Client Dop1.02.20 180548 GE n E — ir 
[b29e-a2e10ac232fc [Conversation ID and Server Message ID in arroyo.db 18:05:49 |bc59-fef2612ea334 

UC Fattar du hur tråkigt jag har 2021-02-24 18: 1 we Jee 
VE EC Hahaha aaa ja fatta de baby 2021-02-24 18:06:47 2021-0224 1 vesc ees 
öga e ARR." [Oj fråga vad jag gör sen bara öppna haha 2021-02-24 18:20:00 [2221-02-24 N Kee" en 
UE CT. Hahhaha svåra tider du vet baby 2021-02-24 18:20:21 [2021-0224 1 Ee ll 
|#3dadbda-6a9a- 5429... tahaha sluta lek svår din fis 2021-02-24 18:20:52 [2021-02-24 1 a 15489 
ll TO CDI ee AT 
a 5429- | Aaa älskling ska va de 2021-02-24 18:47:53 921.0224 1 none ode dale sib 
all D 2021-02-24 19:13:40 | N co cll ss 
ree KC. [Hor går de baby 2021-02-24 20:01:13 eg 1 UK ` ees 
ae | lÅker Oslo baby 2021-02-24 20:07:17 DEN 1 arv Jee 
KE — No? [2021-02-24 20:07:24 oort 1 se Je 
EEE a IUD A Be |- 
sk — Oki baby , åker du själv? [2021-02-24 20:08:12 [20210224 1 e eem 
EE E pan KS n 
A NOkii baby kör forsiktig DEEN 20:08:58 [30:10:36 1 resi pen 
ne [vev TO | —— kb 
KG [År du påväg mu baby 2021-02-24 203222 s pl Dotes Fi 
Ki [Snart baby 2021-02-24 20:45:24 Éis |} bseosospos _ 15315 
KG  _|Okejälsking ät innan och köp snacks och dricka till resan Y [2021-02-24 20:49:17 NN SSV Fi 
Ke [baby honors Prom | coc [5517 
KG Hallå [2021-02-24 21:51:00 Pesas f Gas Pn 
GE Jan [2021-02-24 21:51:51 BE" h Dec be 
H2dadbda-6ada 5329... Gar det art hömta idag för min syster fuckar ur o h håller på att leta [2021-0224 21:52:04 [2021-02-24 1 re een 
Ke Pide luktar fert mycket 2021-02-24 21:5233 his | rr P 
UNC Ika skriva mu till min van vänta baby 2021.02.24 21:52:55 [20210224 1 mue cr Jee 
VE dada 5409... [Gár de och lägga osss dar vi sov sist [2021-0224 21:53:14 2021 02:24 1 Ee padi Jole: — [5524 
Hadaibda-6ada 5109... oj det går ej lägga dar hon år hemma nu de år den fp021-02-24 21:54:06 [20210224 1 c bell" 
Hagatbda-6ada 3429... |Abowbaby ska skriv nu till min van vänta Im 21:55:17 [0.1.0224 ] worms pe 
[454a402a-6a9a-5429- [ERROR - Something went wrong when parsing this message. Manually verify the message with Client 2021-02-24 21:55:38 | 2021-02-24 P jacd38a7a-f7b8-4eb1- 15507 
|b29e-a2e10ac232fc [Conversation ID and Server Message ID in arroyo.db 21:56:20 [bc59-fef2612ea334 

Gi Ps 2021-02-24 21:55:51 Én | Geo: Ps 
VER [Gár de och ta bort imon kl L1max [2021-02-24 21:56:03 [pornos n unner CSS 
Ui CT. IDA har hinat ett ställe 2021-02-24 21:56:12 2021-02-24 1 Pape 
[45da4b2a-6a9a-3429- ` [Assá grejen år dom håller på leta nu vart lukten konmer ifrån och 11 och innan går ej för min syster är vaken [551 97.24 21.56.53 [2021-0224 P acd3Sa7a-f708-4eb1- E 
lb29e-a2e10ac232f% ` Ja [21:57:04 loc59-fef2612ea334 

UE. |Abow vänta måste hitta nån som kör de [2021-02-24 21:59:14 [2021-02-24 1 RTR Jess 
[ibgatb)a-6ada ee? Om jag inte svarar hör ring kanya ar med henne och hon delar nät till mig baby 2021-02-24 22:06:35 [20210224 1 ul: Jee 
NC | Oli baby 2021-02-24 22:07:32 |2021 02-24 1 Vp e TT 
LN 6a9a 3429- ` antar på svar ge mig 20-30min 2021-02-24 22:11:32 [2021-0224 1 ae — [555 
cr rees 2021-02-24 22:11:44 x i rr Fe 
VC. [Horubgar har inget liv 2021-02-24 22:39:32 eg 1 ne ees 
[ibdadb2a-6ada |Omg men pagud (2021-02-24 22:49:25 Ho 1 a mees 
E NC. |Ingetlivasså haha 2021-02-24 22:51:09 ee 1 mene — [i56 
Ui CT. pagud asså de bam fasoner 2021-02-24 22:51:32 [2021-02-24 1 run qM Ho bal 
ee ` | Hur går de 2021-02-24 22:52:47 eg 1 tel" [sie 
9 [Aaa baby fyfan asså inget iv @ @ & & & [2021-02-24 22:55:22 2021-0224 1 AAA 15543 
VC. [Hurgórde 2021-02-24 22:56:37 Ee 1 e Jee 
VC Gar de baby [2021-02-24 22:56:41 ze N Sea Mus 
Ki [amar på svar baby p021-02-24 22:5727 es | biresenosmto Fe 
UNC. [Okej baby, hur gåre för dig har du börja åka 2021-02-24 22:58:10 [2021-02-24 N pon 5547 
VE. [Nej inte an baby [2021-02-24 22:58:41 pernu 1 eene al 
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l45dadb2a-6a9a-5429- 


2021-02-24 


cal 0df2d-OSdf-4alc- 


|b29e-a2e10ac232fc [Máste ju till dig [2021-02-24 22:38:45 12.59.96 1 [bSfe-96£1099b03d e 
UC. |Menkan ingen annan hómta dom sá du kan åka baby [2021-02-24 22:59:16 [2021-02-24 1 EOS [5550 
VK. ` [Baby ingen svara typ [2021-02-24 22:59:40 Bi 1 ee per 
ZC. [Vántar på svar från en annan 2021-02-24 22:59:51 [2021-0224 1 aper ees 
VC lke älskling 2021-02-24 23:01:21 Des 1 iMd. sas 
LK EK. mr snart mot dig [2021-02-24 23:12:09 p" 1 no bed ees 
LC. VVönta måste kolla att alla sover osv 2021-02-24 23:14:08 [20210224 1 sel mes 
tna Sada 3429... [Hittade du år de säkert ställe (2021-02-24 23:14:20 pare SR 1 el ET 
pe B 2021-02-24 23:14:20 Ds 1 veve es 
age CL. [Nej baby men får lägga ute 2021-02-24 23:15:32 [2021-0224 1 alone ode E 
[ibdatb)a-6ada ` |Men dom kan ej va ute [2021-02-24 23:15:44 aeu 1 sel eer 
dan |Skitsamma baby de få bli så ett par dagar 2021.02.24 23:16:05 20210224 1 uec Je 
|i3dadbla-6aba-5429.... |Men de går ej de at fett riskabelt 2021-02-24 23:16:31 [20210224 1 a Jee 
2datb2a-6a9a-5429..... Aaa baby de finns inget annat och göra nu 2021-02-24 23:21:25 tog 1 ucc "Jee 
com TI AMEN 00 7 
LE. kommer och hämta den snart baby 2021-02-24 23:26:11 d 1 E ees 
C RTT SET ee knee be 
GERT TO women | fm 
GE Jesse masons pann | mes fm 
eh ska du dka nu eller ska du åka inorgon baby 2021-02-25 00:55:28 EN 1 rines i ET 
CT. [Nu jag ska dka baby 2021-02-25 00:55:41 Ka N Ves ai s 
LN CT. ` Ska föröka komma hem imon 12021-02-25 00:55:50 1 cs en 
UE CT. |Okejälskling, va försiktig ta hans skor också ta inte vita 2021-02-25 0121:12 E 1 e 111516 
Hibdadb2a-6ada loki baby ska göra de [2021-02-25 01:21:30 ps 1 Farrel bar? 
Sdadb2a-6aba- 5429... Alskardig 2021-02-25 01:22:09 mes | h | ser "ees 
ERST [eee mesoner | preesse pe 
2dadb2a-6ada 3129... om ni kan stanna vid en mack och köp dricka och snacks toll resan 2021-02-25 01:28:27 Ke — 1 sel sagi 
ehr Aaa baby ska göra de 2021-02-25 01:28:59 Te 1 a cr 
Kc [PO p021-02-25013701 pss h A 
Hadadb2a-6ada-5429... (4444 blomman 2021-02-25 02:59:20 02102123 1 le ees 
tow (Godman baby geg gees 2021-0225 03:39:55 Iso t Ges: ben 
UE. |Älskardig också baby skriv då och då hur ee går 9 Y [2021-02-25 03:59:17 er 1 EE seco Jee 
VC. Va baby ska göra de [2021-02-25 04:04:22 E 1 rcs sale”. es 
Ubdatb)a-6ada S429- |Kanske kommer inte ha nät dar baby sá du vet 2021-02-25 04:04:34 100.002 1 Ee — [sere 
eh Okej baby hur går det Y 2021-02-25 06:40:12 20210223 1 TEE HEN spa 
5da402a-629a-5129- _|Ska somna om nu hoppas allt går bra baby, hör av dig då och dá va försiktiga och ta hand om er baby . Älskar [5551 02.25 06.53.39 2021-0225 F acd3Sa7a-f708-4ebI- Loi 
b29e-a2e10ac232fe dig massor :00:08 be59-fef2612ea334 
gode bada S49 [Hej baby vi ari gränsen vi fick inte komma inn 2021-02-25 09:00:39 [2021-02-25 1 ee [sen 
(CT. Va ska ni göra nu då baby ? Ska ni Aka hem elker vaddå [2021-02-25 09:59:37 [2921-02-25 1 EE ` ees 
VC. [Aaa baby vi ska åka hem nu snart 2021-02-25 09:59:54 [021022 1 ucc ce Jee 
CT [Harni ens sovit baby 2021-02-25 10:01:31 |1970-01-01 1 o e ` ees 
Gs Foren 2021-02-25 10:09:44 homo | Karesenoomnosa Fe 
Kc [Peor 2021-02-25 10:09:50 [t sesso be 
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4. Ur det extraherade materialet syns en konversation med användaren "moe ameri". 


Tidsangivelserna i rapporten visar pa UTC-tid vilket innebar att for att fa reell svensk tid laggs 
1 timma till (svensk vintertid). 


2021-02-15 kl 01:09:39 skickar “moe ameri” ett meddelande innehallande en adress 
”Lustgårdsgatan 5 Stadshagen”. Meddelandet låses av ”mahadmose4211” kl 01:09:54. 


[se — | rewd | username | 
ca10df2d-08df-4alc-b8fe-96£409£9003d |[11516 [mahadmose4211 | 
993 laac0-3547-41f4-96c 1-£38b6a150691 [11526 [moe ameri | 


Client Conversation ID Message Content (Creation Timestamp UTC+9| Read Timestamp UTC+0| Content Type Sender ID 
[c39b613d-6f5b-548d-854e-f4a4ccbl6cea|[076-885 24 53 2021-02-13 20:08:37 2021-02-13 20:08:38 1 


¡Server Message ID 


[993 Laac0-3547-41f4-96c1-f38b6a150691|255 y 
[-390613d-6f5b-548d-854e-f4adccbl6cea|[Lustgårdsgatan 5 Stadshagen 2021-02-15 00:09:39 2021-02-15 00:09:54 1 


[993 laac0-3547-41f4-96c1-f38b6a150691||261 


/krinsp H Norlin 


P M Signerad av 


- 
Polise 6P58CT skriver om stoppet förberedelse till rån signerad datum 

Enhet Diarienr 

Region Stockholm, Grova brott I PO Sthlm Nord 5000-K189802-21 
Uppgiftslåmnare Datum Tid 

Eliasson, Charlotte 2021-12-09 14:10 

Beslag verkstållt Material för analys 

Nej Nej 

Mottaget Mottaget datum Tid 


Sätt på vilket uppgift lämnats 


Upprättad av 
Charlotte Eliasson 


Uppgiften avser 


Uppgift 


2021-02-11 kl 18:35 grips Mahad Ali, Pontus Lindstrand och Hussein Abbas på 
Artillerigatan, Göteborg i fordon EDP500 i ärende 5000-K170392-21 för förberedelse till 
grovt rån. I bilen anträffas bland annat en luftpistol som tas i beslag. Alla tre sitter 
frihetsberövade en natt, 2021-02-12 kl 16:25-16:30 verkställs hävningsbeslut på de 
frihetsberövade och samtliga tre försätts på fri fot. 


2021-02-11 kl 18:08:31 skickas ett meddelande fran 6P58CT till GIZYV2. Därefter skickas 
inga meddelanden alls från 6P58CT fören 2021-02-13. 


2021-02-13 kl 13:32:49 skriver 6P58CT till 2CVOVD: 

”Vi hade i bilen en start pistol maskar handskar dom ba förberedelse till rån”. 
2021-02-13 kl 14:02:29 skriver 6P58CT till 2CVOVD: 

”Aaa en natt bara”. 

2021-02-13 kl 14:02:35 skriver 6P58CT till 2CVOVD: 

”Sen man släppte oss”. 


Undertecknad, 
Pa C.Eliasson 


